{"as_of":"2026-08-18T20:22:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:6d04571527387468d850bd85d496711df33cee2af84fa47e8d877cebfec44777","coverage":[{"denominator":54,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":54,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-10T22:39:41.916649Z","state":"measured"},{"denominator":54,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":54,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-18T06:34:40.430872+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2501.01090/citation-record","integrity":"/paper/2501.01090/integrity","json":"/paper/2501.01090/citation-record.json","paper":"/paper/2501.01090"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:39:41.711757Z","title":", \" * write output.state after.block = add.period write newline","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2501.01090","last_updated":"2025-01-02T06:23:51Z","snapshot_observed_at":"2026-08-18T11:38:51.217803Z","submitted_at":"2025-01-02T06:23:51Z","title":"HoneypotNet: Backdoor Attacks Against Model Extraction","version":1},"reference_index":1,"source":"arxiv_source","source_observed_at":"2026-08-10T22:39:41.711757Z"},"links":{"citing_paper":"/paper/2501.01090"},"observation_digest":"sha256:bb83eaf77afe2488a027add21f976c267838ab3069b90a54e0247c803c99817a","observation_id":"525b452a-6760-4d47-8285-c3319b0a334b","resolution":{"observed_at":"2026-08-10T22:39:41.711757Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:39:41.715922Z","title":"write newline","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2501.01090","last_updated":"2025-01-02T06:23:51Z","snapshot_observed_at":"2026-08-18T11:38:51.217803Z","submitted_at":"2025-01-02T06:23:51Z","title":"HoneypotNet: Backdoor Attacks Against Model Extraction","version":1},"reference_index":2,"source":"arxiv_source","source_observed_at":"2026-08-10T22:39:41.715922Z"},"links":{"citing_paper":"/paper/2501.01090"},"observation_digest":"sha256:56b5df5aff5f7da512b6d00e1b660866d6bdf022348e80f809f6edab65bc5fd7","observation_id":"fad4ae9e-e310-498d-87ba-9b0e70b423e8","resolution":{"observed_at":"2026-08-10T22:39:41.715922Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:39:42.712986Z","title":null,"venue":null,"work_id":"f5515d0c-0b50-4a42-becf-6e67a3d19b86","year":2021},"citing_paper":{"arxiv_id":"2501.01090","last_updated":"2025-01-02T06:23:51Z","snapshot_observed_at":"2026-08-18T11:38:51.217803Z","submitted_at":"2025-01-02T06:23:51Z","title":"HoneypotNet: Backdoor Attacks Against Model Extraction","version":1},"reference_index":3,"source":"arxiv_source","source_observed_at":"2026-08-10T22:39:41.719994Z"},"links":{"citing_paper":"/paper/2501.01090"},"observation_digest":"sha256:e88cb5dd1a7f07a38eca995c279343df6dcd413e5fa26b4824e0f0a3e66f4973","observation_id":"8586d2d3-771f-4977-9077-4fb5a7d538c8","resolution":{"observed_at":"2026-08-10T22:39:42.716470Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:39:42.698308Z","title":null,"venue":null,"work_id":"16d2c96b-4f50-421f-9b6d-5d1c1bf8d367","year":2022},"citing_paper":{"arxiv_id":"2501.01090","last_updated":"2025-01-02T06:23:51Z","snapshot_observed_at":"2026-08-18T11:38:51.217803Z","submitted_at":"2025-01-02T06:23:51Z","title":"HoneypotNet: Backdoor Attacks Against Model Extraction","version":1},"reference_index":4,"source":"arxiv_source","source_observed_at":"2026-08-10T22:39:41.723967Z"},"links":{"citing_paper":"/paper/2501.01090"},"observation_digest":"sha256:149b22b83480d4b43036aed5412ae7591742c9ee4adfbc18cf267515f20a0e0e","observation_id":"670536b3-e088-4d97-84f8-8e07c74bf2c6","resolution":{"observed_at":"2026-08-10T22:39:42.703292Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1712.05526","last_updated":"2017-12-15T04:26:26Z","snapshot_observed_at":"2026-07-06T06:14:30.795326Z","submitted_at":"2017-12-15T04:26:26Z","title":"Targeted Backdoor Attacks on Deep Learning Systems Using Data Poisoning","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1712.05526","snapshot_observed_at":"2026-08-10T22:39:41.727205Z","title":null,"venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2501.01090","last_updated":"2025-01-02T06:23:51Z","snapshot_observed_at":"2026-08-18T11:38:51.217803Z","submitted_at":"2025-01-02T06:23:51Z","title":"HoneypotNet: Backdoor Attacks Against Model Extraction","version":1},"reference_index":5,"source":"arxiv_source","source_observed_at":"2026-08-10T22:39:41.727205Z"},"links":{"cited_paper":"/paper/1712.05526","citing_paper":"/paper/2501.01090"},"observation_digest":"sha256:a5a461d91d0220af8b522388edbf47b59270786080731588364fdaa5ab322fe1","observation_id":"16a1ee2e-15a4-441d-96e0-ada144735a95","resolution":{"observed_at":"2026-08-10T22:39:41.727205Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:39:42.683986Z","title":"A.; Lu, Y","venue":null,"work_id":"8f5c12a7-6afa-48cc-82f2-f3a7a0f9c44e","year":2022},"citing_paper":{"arxiv_id":"2501.01090","last_updated":"2025-01-02T06:23:51Z","snapshot_observed_at":"2026-08-18T11:38:51.217803Z","submitted_at":"2025-01-02T06:23:51Z","title":"HoneypotNet: Backdoor Attacks Against Model Extraction","version":1},"reference_index":6,"source":"arxiv_source","source_observed_at":"2026-08-10T22:39:41.731104Z"},"links":{"citing_paper":"/paper/2501.01090"},"observation_digest":"sha256:a6bef60ab5cb4df2668197918d1218e5dee3ca0290e52ffed15f0ac3743715eb","observation_id":"7e881fea-1bf3-4325-9c88-fc74d69b0bc3","resolution":{"observed_at":"2026-08-10T22:39:42.688243Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:39:42.670618Z","title":null,"venue":null,"work_id":"5e9cde7f-365f-48b6-8541-e01c61d6c389","year":2014},"citing_paper":{"arxiv_id":"2501.01090","last_updated":"2025-01-02T06:23:51Z","snapshot_observed_at":"2026-08-18T11:38:51.217803Z","submitted_at":"2025-01-02T06:23:51Z","title":"HoneypotNet: Backdoor Attacks Against Model Extraction","version":1},"reference_index":7,"source":"arxiv_source","source_observed_at":"2026-08-10T22:39:41.734604Z"},"links":{"citing_paper":"/paper/2501.01090"},"observation_digest":"sha256:4b58fd6211969cff4276462d0916835349603e60470d80fa14b3e8a2f7002ed2","observation_id":"5f2223a6-af0e-4d3b-8a5d-40f65fc836be","resolution":{"observed_at":"2026-08-10T22:39:42.674830Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:39:42.657249Z","title":"J.; Shlens, J.; and Szegedy, C","venue":null,"work_id":"2a4a8dfd-422a-4a16-a9f8-6e1a9f201413","year":2015},"citing_paper":{"arxiv_id":"2501.01090","last_updated":"2025-01-02T06:23:51Z","snapshot_observed_at":"2026-08-18T11:38:51.217803Z","submitted_at":"2025-01-02T06:23:51Z","title":"HoneypotNet: Backdoor Attacks Against Model Extraction","version":1},"reference_index":8,"source":"arxiv_source","source_observed_at":"2026-08-10T22:39:41.738202Z"},"links":{"citing_paper":"/paper/2501.01090"},"observation_digest":"sha256:0cfe62d1507b2e6f845d28f6c09000670ae8b24f5f8b942cb1f1dfd4ede13344","observation_id":"fc0c6247-0b19-4ed2-a026-dc3aad1c8265","resolution":{"observed_at":"2026-08-10T22:39:42.661712Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:39:42.644985Z","title":null,"venue":null,"work_id":"0b207ae9-cfd7-43a2-bfc8-f0df8e2cb102","year":2007},"citing_paper":{"arxiv_id":"2501.01090","last_updated":"2025-01-02T06:23:51Z","snapshot_observed_at":"2026-08-18T11:38:51.217803Z","submitted_at":"2025-01-02T06:23:51Z","title":"HoneypotNet: Backdoor Attacks Against Model Extraction","version":1},"reference_index":9,"source":"arxiv_source","source_observed_at":"2026-08-10T22:39:41.742065Z"},"links":{"citing_paper":"/paper/2501.01090"},"observation_digest":"sha256:07e44e8ef159d2d271ac3e95aa85cd33a44149a4bc5944011e0436b53132d20e","observation_id":"d60d1bca-5aa5-4f11-8186-5f157cf2e64b","resolution":{"observed_at":"2026-08-10T22:39:42.649344Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1708.06733","snapshot_observed_at":"2026-08-10T22:39:41.745444Z","title":null,"venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2501.01090","last_updated":"2025-01-02T06:23:51Z","snapshot_observed_at":"2026-08-18T11:38:51.217803Z","submitted_at":"2025-01-02T06:23:51Z","title":"HoneypotNet: Backdoor Attacks Against Model Extraction","version":1},"reference_index":10,"source":"arxiv_source","source_observed_at":"2026-08-10T22:39:41.745444Z"},"links":{"cited_paper":"/paper/1708.06733","citing_paper":"/paper/2501.01090"},"observation_digest":"sha256:23ebcb54d263a3d453320c455e10ceadecff9cdc488e7fe567d1be74047078ee","observation_id":"0fb45425-a1ae-4f87-a1f6-c55ee616a413","resolution":{"observed_at":"2026-08-10T22:39:41.745444Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:39:42.631812Z","title":null,"venue":null,"work_id":"99f11349-dfbe-4dc2-b724-3d9048d891c3","year":2016},"citing_paper":{"arxiv_id":"2501.01090","last_updated":"2025-01-02T06:23:51Z","snapshot_observed_at":"2026-08-18T11:38:51.217803Z","submitted_at":"2025-01-02T06:23:51Z","title":"HoneypotNet: Backdoor Attacks Against Model Extraction","version":1},"reference_index":11,"source":"arxiv_source","source_observed_at":"2026-08-10T22:39:41.750015Z"},"links":{"citing_paper":"/paper/2501.01090"},"observation_digest":"sha256:18db0204be198977a162d0f50a7090acfd7b9b5616bcea64dbe03063cd2b1018","observation_id":"9b26b484-5898-4b6c-99c0-85c7e694cf5b","resolution":{"observed_at":"2026-08-10T22:39:42.636679Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:39:41.753895Z","title":null,"venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2501.01090","last_updated":"2025-01-02T06:23:51Z","snapshot_observed_at":"2026-08-18T11:38:51.217803Z","submitted_at":"2025-01-02T06:23:51Z","title":"HoneypotNet: Backdoor Attacks Against Model Extraction","version":1},"reference_index":12,"source":"arxiv_source","source_observed_at":"2026-08-10T22:39:41.753895Z"},"links":{"citing_paper":"/paper/2501.01090"},"observation_digest":"sha256:ae9ee843a1658e8f005fb74a72e69b91ec592386bd9532b95e93090c7813da24","observation_id":"f72bd06c-117f-49e7-b0c0-17a65f832766","resolution":{"observed_at":"2026-08-10T22:39:41.753895Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:39:42.611123Z","title":"M.; and Bailey, J","venue":null,"work_id":"530bed43-400f-449c-912a-25e56dcb1b26","year":2023},"citing_paper":{"arxiv_id":"2501.01090","last_updated":"2025-01-02T06:23:51Z","snapshot_observed_at":"2026-08-18T11:38:51.217803Z","submitted_at":"2025-01-02T06:23:51Z","title":"HoneypotNet: Backdoor Attacks Against Model Extraction","version":1},"reference_index":13,"source":"arxiv_source","source_observed_at":"2026-08-10T22:39:41.757028Z"},"links":{"citing_paper":"/paper/2501.01090"},"observation_digest":"sha256:16f42291b1b032b74dc419eeaedbab850f4a085e468a3b3689235d603b1e3d38","observation_id":"34bfab43-7776-4907-8227-dd7f3166206f","resolution":{"observed_at":"2026-08-10T22:39:42.614611Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:39:42.600786Z","title":null,"venue":null,"work_id":"df4bae55-c3c7-4bfd-aa92-70381e8bdcdf","year":2023},"citing_paper":{"arxiv_id":"2501.01090","last_updated":"2025-01-02T06:23:51Z","snapshot_observed_at":"2026-08-18T11:38:51.217803Z","submitted_at":"2025-01-02T06:23:51Z","title":"HoneypotNet: Backdoor Attacks Against Model Extraction","version":1},"reference_index":14,"source":"arxiv_source","source_observed_at":"2026-08-10T22:39:41.760518Z"},"links":{"citing_paper":"/paper/2501.01090"},"observation_digest":"sha256:50af9374e7080939c1f0708fdc486fb9a94a009c2959bf9a6861ce6a2e620318","observation_id":"8cc4ebdb-bb3d-4f96-ac09-b4e85235db1f","resolution":{"observed_at":"2026-08-10T22:39:42.604232Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:39:42.588975Z","title":"A.; Chandrasekaran, V.; and Papernot, N","venue":null,"work_id":"0f08f936-e813-4383-991f-70b65dc9ef75","year":2021},"citing_paper":{"arxiv_id":"2501.01090","last_updated":"2025-01-02T06:23:51Z","snapshot_observed_at":"2026-08-18T11:38:51.217803Z","submitted_at":"2025-01-02T06:23:51Z","title":"HoneypotNet: Backdoor Attacks Against Model Extraction","version":1},"reference_index":15,"source":"arxiv_source","source_observed_at":"2026-08-10T22:39:41.764195Z"},"links":{"citing_paper":"/paper/2501.01090"},"observation_digest":"sha256:3603323b69042cb7013c9bc2dd8cc09ed79deefbe86064833f56b6ccdcf4b00d","observation_id":"0c4be7bd-d64c-4a7f-9592-126c623d94f9","resolution":{"observed_at":"2026-08-10T22:39:42.592744Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:39:42.576055Z","title":null,"venue":null,"work_id":"4a8ffb2b-a77b-4c77-b025-d01b7f42db97","year":2024},"citing_paper":{"arxiv_id":"2501.01090","last_updated":"2025-01-02T06:23:51Z","snapshot_observed_at":"2026-08-18T11:38:51.217803Z","submitted_at":"2025-01-02T06:23:51Z","title":"HoneypotNet: Backdoor Attacks Against Model Extraction","version":1},"reference_index":16,"source":"arxiv_source","source_observed_at":"2026-08-10T22:39:41.767602Z"},"links":{"citing_paper":"/paper/2501.01090"},"observation_digest":"sha256:2179f5d4bb29e30158a9bf3b46cd01d0f79f8ff376e1fba6242f6810ed6ddbdc","observation_id":"9aba4f3d-f799-4b13-a02f-8ab5f089fc41","resolution":{"observed_at":"2026-08-10T22:39:42.580614Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:39:42.562846Z","title":null,"venue":null,"work_id":"8a80315a-4ec7-4110-8451-f14dbca7c642","year":2019},"citing_paper":{"arxiv_id":"2501.01090","last_updated":"2025-01-02T06:23:51Z","snapshot_observed_at":"2026-08-18T11:38:51.217803Z","submitted_at":"2025-01-02T06:23:51Z","title":"HoneypotNet: Backdoor Attacks Against Model Extraction","version":1},"reference_index":17,"source":"arxiv_source","source_observed_at":"2026-08-10T22:39:41.771412Z"},"links":{"citing_paper":"/paper/2501.01090"},"observation_digest":"sha256:e21e579b9827eafa3974bee421be41869182fa6b77ed5e9aa4538b171b423a06","observation_id":"29cfb3ee-a1f3-4d98-8c0f-d91c8276ccf9","resolution":{"observed_at":"2026-08-10T22:39:42.566478Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:39:42.549746Z","title":null,"venue":null,"work_id":"b9ea4bcc-0ae1-48a2-8c90-b64dd1121c2b","year":2021},"citing_paper":{"arxiv_id":"2501.01090","last_updated":"2025-01-02T06:23:51Z","snapshot_observed_at":"2026-08-18T11:38:51.217803Z","submitted_at":"2025-01-02T06:23:51Z","title":"HoneypotNet: Backdoor Attacks Against Model Extraction","version":1},"reference_index":18,"source":"arxiv_source","source_observed_at":"2026-08-10T22:39:41.775198Z"},"links":{"citing_paper":"/paper/2501.01090"},"observation_digest":"sha256:a16670b612d9f5ca28628b479b0c48b32b6d5a0c06129b51e37a89c2708dc260","observation_id":"166f78e4-6d13-4e41-afca-fa26753cfc40","resolution":{"observed_at":"2026-08-10T22:39:42.553859Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:39:42.538153Z","title":null,"venue":null,"work_id":"d211b19d-688d-4aa6-b4ee-216d7d6e3ae7","year":2020},"citing_paper":{"arxiv_id":"2501.01090","last_updated":"2025-01-02T06:23:51Z","snapshot_observed_at":"2026-08-18T11:38:51.217803Z","submitted_at":"2025-01-02T06:23:51Z","title":"HoneypotNet: Backdoor Attacks Against Model Extraction","version":1},"reference_index":19,"source":"arxiv_source","source_observed_at":"2026-08-10T22:39:41.778546Z"},"links":{"citing_paper":"/paper/2501.01090"},"observation_digest":"sha256:0d04117745af28a564334f97e3394e9cdfad92895c53ea09ad869a34fbc42707","observation_id":"264c82be-57d9-4540-8a24-af59ffd53439","resolution":{"observed_at":"2026-08-10T22:39:42.542073Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2302.08466","last_updated":"2023-10-18T17:08:26Z","snapshot_observed_at":"2026-08-18T09:22:57.258217Z","submitted_at":"2023-02-16T18:20:27Z","title":"Marich: A Query-efficient Distributionally Equivalent Model Extraction Attack using Public Data","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2302.08466","snapshot_observed_at":"2026-08-10T22:39:41.782271Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2501.01090","last_updated":"2025-01-02T06:23:51Z","snapshot_observed_at":"2026-08-18T11:38:51.217803Z","submitted_at":"2025-01-02T06:23:51Z","title":"HoneypotNet: Backdoor Attacks Against Model Extraction","version":1},"reference_index":20,"source":"arxiv_source","source_observed_at":"2026-08-10T22:39:41.782271Z"},"links":{"cited_paper":"/paper/2302.08466","citing_paper":"/paper/2501.01090"},"observation_digest":"sha256:ba98ef224cdebe614750fd7051bc9c0cb0342a0576b6eefd6ae173aa81b05aea","observation_id":"0a62cfd5-ce35-4e7f-8806-2147faf46ef9","resolution":{"observed_at":"2026-08-10T22:39:41.782271Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:39:42.526466Z","title":null,"venue":null,"work_id":"98cfc5d5-f965-44fc-9c1f-1e9b81978e5f","year":2018},"citing_paper":{"arxiv_id":"2501.01090","last_updated":"2025-01-02T06:23:51Z","snapshot_observed_at":"2026-08-18T11:38:51.217803Z","submitted_at":"2025-01-02T06:23:51Z","title":"HoneypotNet: Backdoor Attacks Against Model Extraction","version":1},"reference_index":21,"source":"arxiv_source","source_observed_at":"2026-08-10T22:39:41.786138Z"},"links":{"citing_paper":"/paper/2501.01090"},"observation_digest":"sha256:fa7e9d961f8538b040b2ce205f3146de8546f2fdc47ca4a250bbac84057d0eae","observation_id":"e2908841-f1cf-43ca-8c40-e53c9404bc26","resolution":{"observed_at":"2026-08-10T22:39:42.530493Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:39:41.790097Z","title":null,"venue":null,"work_id":null,"year":2009},"citing_paper":{"arxiv_id":"2501.01090","last_updated":"2025-01-02T06:23:51Z","snapshot_observed_at":"2026-08-18T11:38:51.217803Z","submitted_at":"2025-01-02T06:23:51Z","title":"HoneypotNet: Backdoor Attacks Against Model Extraction","version":1},"reference_index":22,"source":"arxiv_source","source_observed_at":"2026-08-10T22:39:41.790097Z"},"links":{"citing_paper":"/paper/2501.01090"},"observation_digest":"sha256:c12a85b2bcf1b31d6c18045483979790c4f3cb786539d7d6b58c5af3530d1034","observation_id":"ebd70448-5d70-424a-8664-4d65ed64b258","resolution":{"observed_at":"2026-08-10T22:39:41.790097Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:39:42.507689Z","title":null,"venue":null,"work_id":"3a62bd11-1c4b-4b78-bb8e-423c3115dff6","year":1951},"citing_paper":{"arxiv_id":"2501.01090","last_updated":"2025-01-02T06:23:51Z","snapshot_observed_at":"2026-08-18T11:38:51.217803Z","submitted_at":"2025-01-02T06:23:51Z","title":"HoneypotNet: Backdoor Attacks Against Model Extraction","version":1},"reference_index":23,"source":"arxiv_source","source_observed_at":"2026-08-10T22:39:41.794128Z"},"links":{"citing_paper":"/paper/2501.01090"},"observation_digest":"sha256:82037c319fe8b12688df490ebf2cd2a8eda8b64c44dec6f418ed442b1e8fc1f0","observation_id":"9c377770-912f-43c1-9470-77b5c183b2e1","resolution":{"observed_at":"2026-08-10T22:39:42.510979Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:39:42.496341Z","title":null,"venue":null,"work_id":"d75f4dc8-8656-488e-b491-7cb5f7087470","year":2023},"citing_paper":{"arxiv_id":"2501.01090","last_updated":"2025-01-02T06:23:51Z","snapshot_observed_at":"2026-08-18T11:38:51.217803Z","submitted_at":"2025-01-02T06:23:51Z","title":"HoneypotNet: Backdoor Attacks Against Model Extraction","version":1},"reference_index":24,"source":"arxiv_source","source_observed_at":"2026-08-10T22:39:41.798891Z"},"links":{"citing_paper":"/paper/2501.01090"},"observation_digest":"sha256:9c795a3b25d28062bc76c72b22182d6eceb666d94ed9bcff5b350fe2bb9932ba","observation_id":"27c7cddc-b909-491b-be8d-ad2bc73e2f87","resolution":{"observed_at":"2026-08-10T22:39:42.500022Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:39:42.485459Z","title":null,"venue":null,"work_id":"2c6e94bb-518b-409a-a47d-906abac25d37","year":2022},"citing_paper":{"arxiv_id":"2501.01090","last_updated":"2025-01-02T06:23:51Z","snapshot_observed_at":"2026-08-18T11:38:51.217803Z","submitted_at":"2025-01-02T06:23:51Z","title":"HoneypotNet: Backdoor Attacks Against Model Extraction","version":1},"reference_index":25,"source":"arxiv_source","source_observed_at":"2026-08-10T22:39:41.802890Z"},"links":{"citing_paper":"/paper/2501.01090"},"observation_digest":"sha256:5511e38cfe58bdd6597f089cc81ae111d629f7ac4679d714739c6a6262900fff","observation_id":"42e0a364-65bc-4aac-b07e-e05ef33e8808","resolution":{"observed_at":"2026-08-10T22:39:42.489001Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:39:42.474064Z","title":null,"venue":null,"work_id":"880b1479-3c93-4fbb-9894-84250e2e00c9","year":2023},"citing_paper":{"arxiv_id":"2501.01090","last_updated":"2025-01-02T06:23:51Z","snapshot_observed_at":"2026-08-18T11:38:51.217803Z","submitted_at":"2025-01-02T06:23:51Z","title":"HoneypotNet: Backdoor Attacks Against Model Extraction","version":1},"reference_index":26,"source":"arxiv_source","source_observed_at":"2026-08-10T22:39:41.806455Z"},"links":{"citing_paper":"/paper/2501.01090"},"observation_digest":"sha256:6aaf3e43c403c5f85a39ab6117264f1b7541395f4bca44e374a8fb7fbec9fe8d","observation_id":"dfbc3903-df16-4cf4-bee6-9276ba823d4b","resolution":{"observed_at":"2026-08-10T22:39:42.477848Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:39:42.461969Z","title":null,"venue":null,"work_id":"242df56e-0e77-4f5a-890f-d334e8198028","year":2023},"citing_paper":{"arxiv_id":"2501.01090","last_updated":"2025-01-02T06:23:51Z","snapshot_observed_at":"2026-08-18T11:38:51.217803Z","submitted_at":"2025-01-02T06:23:51Z","title":"HoneypotNet: Backdoor Attacks Against Model Extraction","version":1},"reference_index":27,"source":"arxiv_source","source_observed_at":"2026-08-10T22:39:41.810027Z"},"links":{"citing_paper":"/paper/2501.01090"},"observation_digest":"sha256:5c1a8c302774b435365f1c5f49998448bf4286104e27f8669d504fa170ca69be","observation_id":"3f5fcc69-69b1-4c34-aa8b-72f1be8b2a23","resolution":{"observed_at":"2026-08-10T22:39:42.466475Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:39:42.450638Z","title":null,"venue":null,"work_id":"11604177-7f8b-4d49-95f2-3331f6a144fb","year":2017},"citing_paper":{"arxiv_id":"2501.01090","last_updated":"2025-01-02T06:23:51Z","snapshot_observed_at":"2026-08-18T11:38:51.217803Z","submitted_at":"2025-01-02T06:23:51Z","title":"HoneypotNet: Backdoor Attacks Against Model Extraction","version":1},"reference_index":28,"source":"arxiv_source","source_observed_at":"2026-08-10T22:39:41.815038Z"},"links":{"citing_paper":"/paper/2501.01090"},"observation_digest":"sha256:850d458da1daabe55a7ea75c0047f6436d0e46ae38e56d485caab92b7dae8296","observation_id":"a9cc3160-2974-4b59-9014-5815f1c493c3","resolution":{"observed_at":"2026-08-10T22:39:42.454556Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:39:42.439286Z","title":null,"venue":null,"work_id":"9f3d02bd-a621-43bf-8016-72a1bdf1e205","year":2019},"citing_paper":{"arxiv_id":"2501.01090","last_updated":"2025-01-02T06:23:51Z","snapshot_observed_at":"2026-08-18T11:38:51.217803Z","submitted_at":"2025-01-02T06:23:51Z","title":"HoneypotNet: Backdoor Attacks Against Model Extraction","version":1},"reference_index":29,"source":"arxiv_source","source_observed_at":"2026-08-10T22:39:41.818579Z"},"links":{"citing_paper":"/paper/2501.01090"},"observation_digest":"sha256:73595573748e0dde22a5b7d773795449e930410d148ae79e3b2915da6a8c7508","observation_id":"c69d1bd3-2cb4-46a8-9c41-ae2251b6ebc7","resolution":{"observed_at":"2026-08-10T22:39:42.443292Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2404.00108","last_updated":"2024-03-29T18:52:33Z","snapshot_observed_at":"2026-08-18T20:10:59.341407Z","submitted_at":"2024-03-29T18:52:33Z","title":"Efficient Data-Free Model Stealing with Label Diversity","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.00108","snapshot_observed_at":"2026-08-10T22:39:41.822173Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2501.01090","last_updated":"2025-01-02T06:23:51Z","snapshot_observed_at":"2026-08-18T11:38:51.217803Z","submitted_at":"2025-01-02T06:23:51Z","title":"HoneypotNet: Backdoor Attacks Against Model Extraction","version":1},"reference_index":30,"source":"arxiv_source","source_observed_at":"2026-08-10T22:39:41.822173Z"},"links":{"cited_paper":"/paper/2404.00108","citing_paper":"/paper/2501.01090"},"observation_digest":"sha256:49eb237aea9b5465d29f39913016d71274446a7f66a6f48e3e84dee474e8b27f","observation_id":"a9efc951-7a28-48b7-94e6-8caf639e319f","resolution":{"observed_at":"2026-08-10T22:39:41.822173Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:39:42.427755Z","title":null,"venue":null,"work_id":"36dda3da-4f3f-44c9-8e23-46621508e7d3","year":2024},"citing_paper":{"arxiv_id":"2501.01090","last_updated":"2025-01-02T06:23:51Z","snapshot_observed_at":"2026-08-18T11:38:51.217803Z","submitted_at":"2025-01-02T06:23:51Z","title":"HoneypotNet: Backdoor Attacks Against Model Extraction","version":1},"reference_index":31,"source":"arxiv_source","source_observed_at":"2026-08-10T22:39:41.826125Z"},"links":{"citing_paper":"/paper/2501.01090"},"observation_digest":"sha256:5325ac7cad3e429effb580867e86a9616ae4ca33e641ecd7433b1b52364ab38a","observation_id":"71fc5312-7c4a-4587-a12b-3f2098ccc54a","resolution":{"observed_at":"2026-08-10T22:39:42.432073Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:39:42.416641Z","title":null,"venue":null,"work_id":"65bc4736-5248-4b32-a1c3-c0dbdfbc0b2f","year":2017},"citing_paper":{"arxiv_id":"2501.01090","last_updated":"2025-01-02T06:23:51Z","snapshot_observed_at":"2026-08-18T11:38:51.217803Z","submitted_at":"2025-01-02T06:23:51Z","title":"HoneypotNet: Backdoor Attacks Against Model Extraction","version":1},"reference_index":32,"source":"arxiv_source","source_observed_at":"2026-08-10T22:39:41.829921Z"},"links":{"citing_paper":"/paper/2501.01090"},"observation_digest":"sha256:0ea2a5bdd042e5e6b762870b8c383811540cfd62a0570ffca44888e8be8ae3da","observation_id":"06936e1b-6caf-42c0-83ac-f722760acd7e","resolution":{"observed_at":"2026-08-10T22:39:42.420374Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:39:42.405339Z","title":null,"venue":null,"work_id":"174c72aa-30cf-4285-aa5f-507d67892b32","year":2019},"citing_paper":{"arxiv_id":"2501.01090","last_updated":"2025-01-02T06:23:51Z","snapshot_observed_at":"2026-08-18T11:38:51.217803Z","submitted_at":"2025-01-02T06:23:51Z","title":"HoneypotNet: Backdoor Attacks Against Model Extraction","version":1},"reference_index":33,"source":"arxiv_source","source_observed_at":"2026-08-10T22:39:41.833377Z"},"links":{"citing_paper":"/paper/2501.01090"},"observation_digest":"sha256:f9a65a2a2777a7da3dfdfb52447c9218653db942808f613c7ecfa86be070ba51","observation_id":"bc881232-edd4-4e92-9218-519138d827bb","resolution":{"observed_at":"2026-08-10T22:39:42.409288Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:39:42.394335Z","title":null,"venue":null,"work_id":"78c4c675-94bf-40e1-b50d-c6d063a3fb17","year":2019},"citing_paper":{"arxiv_id":"2501.01090","last_updated":"2025-01-02T06:23:51Z","snapshot_observed_at":"2026-08-18T11:38:51.217803Z","submitted_at":"2025-01-02T06:23:51Z","title":"HoneypotNet: Backdoor Attacks Against Model Extraction","version":1},"reference_index":34,"source":"arxiv_source","source_observed_at":"2026-08-10T22:39:41.836911Z"},"links":{"citing_paper":"/paper/2501.01090"},"observation_digest":"sha256:7c8a91c0cd4885fa7f233852da7b7bbf56f1e6b7f28d7cf5c580a0bd110b06b9","observation_id":"4f03c992-d5cc-4165-9461-49795dc365a7","resolution":{"observed_at":"2026-08-10T22:39:42.397965Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:39:42.382228Z","title":null,"venue":null,"work_id":"8b5dfc4d-57a5-4970-8b62-049043c4cfcc","year":2020},"citing_paper":{"arxiv_id":"2501.01090","last_updated":"2025-01-02T06:23:51Z","snapshot_observed_at":"2026-08-18T11:38:51.217803Z","submitted_at":"2025-01-02T06:23:51Z","title":"HoneypotNet: Backdoor Attacks Against Model Extraction","version":1},"reference_index":35,"source":"arxiv_source","source_observed_at":"2026-08-10T22:39:41.840689Z"},"links":{"citing_paper":"/paper/2501.01090"},"observation_digest":"sha256:3883d8023f9152a65a8733a99771e087ffbc6a4b088cbabd53b82949269ad771","observation_id":"a629f712-0308-4edc-ae89-27c501144723","resolution":{"observed_at":"2026-08-10T22:39:42.386274Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:39:42.371210Z","title":"B.; and Swami, A","venue":null,"work_id":"69b0cc3d-353d-47a3-a55b-9ac8af988d7f","year":2017},"citing_paper":{"arxiv_id":"2501.01090","last_updated":"2025-01-02T06:23:51Z","snapshot_observed_at":"2026-08-18T11:38:51.217803Z","submitted_at":"2025-01-02T06:23:51Z","title":"HoneypotNet: Backdoor Attacks Against Model Extraction","version":1},"reference_index":36,"source":"arxiv_source","source_observed_at":"2026-08-10T22:39:41.844509Z"},"links":{"citing_paper":"/paper/2501.01090"},"observation_digest":"sha256:40f5475d6d182a3878190e219efa10ebdf0a695bdacb0766191b660d566a2ba0","observation_id":"df0bf805-2ad5-43bf-b27d-41a3d82e1975","resolution":{"observed_at":"2026-08-10T22:39:42.375095Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:39:42.358737Z","title":null,"venue":null,"work_id":"7a17728c-0e07-4cb9-8344-f889f5bc9994","year":2015},"citing_paper":{"arxiv_id":"2501.01090","last_updated":"2025-01-02T06:23:51Z","snapshot_observed_at":"2026-08-18T11:38:51.217803Z","submitted_at":"2025-01-02T06:23:51Z","title":"HoneypotNet: Backdoor Attacks Against Model Extraction","version":1},"reference_index":37,"source":"arxiv_source","source_observed_at":"2026-08-10T22:39:41.848769Z"},"links":{"citing_paper":"/paper/2501.01090"},"observation_digest":"sha256:721fcb16224a7a336eed12f46b66e86fb5421bcf7be0828691d06a0c204549ca","observation_id":"4d79ece6-c262-469e-9bbf-f426293a8770","resolution":{"observed_at":"2026-08-10T22:39:42.363106Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2403.15010","doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:39:42.097694Z","title":null,"venue":null,"work_id":"87cdb576-10a2-4dc1-8642-d2e17f48a76a","year":2024},"citing_paper":{"arxiv_id":"2501.01090","last_updated":"2025-01-02T06:23:51Z","snapshot_observed_at":"2026-08-18T11:38:51.217803Z","submitted_at":"2025-01-02T06:23:51Z","title":"HoneypotNet: Backdoor Attacks Against Model Extraction","version":1},"reference_index":38,"source":"arxiv_source","source_observed_at":"2026-08-10T22:39:41.852705Z"},"links":{"citing_paper":"/paper/2501.01090"},"observation_digest":"sha256:ec48ad2bc4beea7b247821138ddaa6d547fa71d7ffa50ce09af36c09545194e3","observation_id":"058d8d10-b7b9-4375-ac79-b19d9789e87a","resolution":{"observed_at":"2026-08-10T22:39:42.104822Z","resolver_source":"raw_fallback","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:39:42.346641Z","title":null,"venue":null,"work_id":"27bd520c-df53-475f-86ca-07ef336004ba","year":2015},"citing_paper":{"arxiv_id":"2501.01090","last_updated":"2025-01-02T06:23:51Z","snapshot_observed_at":"2026-08-18T11:38:51.217803Z","submitted_at":"2025-01-02T06:23:51Z","title":"HoneypotNet: Backdoor Attacks Against Model Extraction","version":1},"reference_index":39,"source":"arxiv_source","source_observed_at":"2026-08-10T22:39:41.856265Z"},"links":{"citing_paper":"/paper/2501.01090"},"observation_digest":"sha256:c0356be85b062a425999304cc5ae424070d676786fa2f7e7e100d9cda3954743","observation_id":"1b436248-d09a-47db-b7c1-5edb2869af5f","resolution":{"observed_at":"2026-08-10T22:39:42.350665Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:39:42.334533Z","title":null,"venue":null,"work_id":"39131b48-8c06-4e61-93a2-46892005effd","year":2022},"citing_paper":{"arxiv_id":"2501.01090","last_updated":"2025-01-02T06:23:51Z","snapshot_observed_at":"2026-08-18T11:38:51.217803Z","submitted_at":"2025-01-02T06:23:51Z","title":"HoneypotNet: Backdoor Attacks Against Model Extraction","version":1},"reference_index":40,"source":"arxiv_source","source_observed_at":"2026-08-10T22:39:41.859908Z"},"links":{"citing_paper":"/paper/2501.01090"},"observation_digest":"sha256:38586686134e0405a6f7355e2f4aada86e9a8db8d3dfa7b9ecb9770edd6bc138","observation_id":"e04427dd-2b1e-4d23-8016-d50eedd4c2e7","resolution":{"observed_at":"2026-08-10T22:39:42.338651Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:39:42.320244Z","title":"S.; and Goldstein, T","venue":null,"work_id":"bc0ddae1-303c-4887-b6f0-aff3fca7e20a","year":2020},"citing_paper":{"arxiv_id":"2501.01090","last_updated":"2025-01-02T06:23:51Z","snapshot_observed_at":"2026-08-18T11:38:51.217803Z","submitted_at":"2025-01-02T06:23:51Z","title":"HoneypotNet: Backdoor Attacks Against Model Extraction","version":1},"reference_index":41,"source":"arxiv_source","source_observed_at":"2026-08-10T22:39:41.863925Z"},"links":{"citing_paper":"/paper/2501.01090"},"observation_digest":"sha256:74567ac7122cc65764618c4b76402be26e6aa8759c9ad2aad97ad28c5b155557","observation_id":"15340910-51eb-4e04-9a48-2a3afdeb381e","resolution":{"observed_at":"2026-08-10T22:39:42.324766Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:39:42.305259Z","title":null,"venue":null,"work_id":"ebf8bbb5-daee-4316-b503-2743a88217eb","year":2018},"citing_paper":{"arxiv_id":"2501.01090","last_updated":"2025-01-02T06:23:51Z","snapshot_observed_at":"2026-08-18T11:38:51.217803Z","submitted_at":"2025-01-02T06:23:51Z","title":"HoneypotNet: Backdoor Attacks Against Model Extraction","version":1},"reference_index":42,"source":"arxiv_source","source_observed_at":"2026-08-10T22:39:41.867289Z"},"links":{"citing_paper":"/paper/2501.01090"},"observation_digest":"sha256:3aa89c4955d6484c9619c3c91a08f0ade6db50d84a21d79450f756be5caf8f5d","observation_id":"cc3dbaa1-2f96-447c-91d6-56780bbc3813","resolution":{"observed_at":"2026-08-10T22:39:42.309277Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:39:42.292667Z","title":null,"venue":null,"work_id":"d3dd637d-e8ec-4400-a959-5a1ec8f25ab1","year":2014},"citing_paper":{"arxiv_id":"2501.01090","last_updated":"2025-01-02T06:23:51Z","snapshot_observed_at":"2026-08-18T11:38:51.217803Z","submitted_at":"2025-01-02T06:23:51Z","title":"HoneypotNet: Backdoor Attacks Against Model Extraction","version":1},"reference_index":43,"source":"arxiv_source","source_observed_at":"2026-08-10T22:39:41.870826Z"},"links":{"citing_paper":"/paper/2501.01090"},"observation_digest":"sha256:35ad6ce4719cae82105cc743fde5404388403e7c53e25e3d5e3d1d0bdd99f1bf","observation_id":"417666a6-f98f-4676-b3ba-b7c6f385198f","resolution":{"observed_at":"2026-08-10T22:39:42.297032Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:39:42.277906Z","title":null,"venue":null,"work_id":"00ec8a2e-e576-49dc-b0bb-bd76060053ba","year":2023},"citing_paper":{"arxiv_id":"2501.01090","last_updated":"2025-01-02T06:23:51Z","snapshot_observed_at":"2026-08-18T11:38:51.217803Z","submitted_at":"2025-01-02T06:23:51Z","title":"HoneypotNet: Backdoor Attacks Against Model Extraction","version":1},"reference_index":44,"source":"arxiv_source","source_observed_at":"2026-08-10T22:39:41.875029Z"},"links":{"citing_paper":"/paper/2501.01090"},"observation_digest":"sha256:8ed308307e5fc4faa9bd25107e0cae982cc34100a64e22da437109a975dae6b6","observation_id":"c2c33a83-07cd-4e14-8ed2-2a1c1d47e33a","resolution":{"observed_at":"2026-08-10T22:39:42.283520Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:39:42.265945Z","title":"Z.; and Chen, Y","venue":null,"work_id":"59457853-83e2-400a-b10f-ab62697e10d2","year":2024},"citing_paper":{"arxiv_id":"2501.01090","last_updated":"2025-01-02T06:23:51Z","snapshot_observed_at":"2026-08-18T11:38:51.217803Z","submitted_at":"2025-01-02T06:23:51Z","title":"HoneypotNet: Backdoor Attacks Against Model Extraction","version":1},"reference_index":45,"source":"arxiv_source","source_observed_at":"2026-08-10T22:39:41.879653Z"},"links":{"citing_paper":"/paper/2501.01090"},"observation_digest":"sha256:577f2dd2b126e2fb92cda0bb8710077ca0e6d4cc1cb5c504d384f2304d7d0706","observation_id":"b1fb6295-cdd7-4f01-af31-1b21c1a5ec42","resolution":{"observed_at":"2026-08-10T22:39:42.269914Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:39:42.253670Z","title":null,"venue":null,"work_id":"409c173a-3eba-4906-8d82-4a1a50fe37b6","year":2020},"citing_paper":{"arxiv_id":"2501.01090","last_updated":"2025-01-02T06:23:51Z","snapshot_observed_at":"2026-08-18T11:38:51.217803Z","submitted_at":"2025-01-02T06:23:51Z","title":"HoneypotNet: Backdoor Attacks Against Model Extraction","version":1},"reference_index":46,"source":"arxiv_source","source_observed_at":"2026-08-10T22:39:41.882903Z"},"links":{"citing_paper":"/paper/2501.01090"},"observation_digest":"sha256:40e9e120be8334528a64c3b0f8c331973b35927db17db016cbebdc0c93b4bef6","observation_id":"5950e62b-6002-4bd2-9ed7-9201654ace62","resolution":{"observed_at":"2026-08-10T22:39:42.257748Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:39:41.886450Z","title":null,"venue":null,"work_id":null,"year":2011},"citing_paper":{"arxiv_id":"2501.01090","last_updated":"2025-01-02T06:23:51Z","snapshot_observed_at":"2026-08-18T11:38:51.217803Z","submitted_at":"2025-01-02T06:23:51Z","title":"HoneypotNet: Backdoor Attacks Against Model Extraction","version":1},"reference_index":47,"source":"arxiv_source","source_observed_at":"2026-08-10T22:39:41.886450Z"},"links":{"citing_paper":"/paper/2501.01090"},"observation_digest":"sha256:511c1891c9914241324969938bd17c14e9eb35756b3c9787724a36161d6d1cd2","observation_id":"b0f9437f-eb7d-4815-bc06-7f75b6ef641e","resolution":{"observed_at":"2026-08-10T22:39:41.886450Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:39:42.232915Z","title":null,"venue":null,"work_id":"b4ec1556-6441-4375-af4b-6ab9bb7cec2a","year":2022},"citing_paper":{"arxiv_id":"2501.01090","last_updated":"2025-01-02T06:23:51Z","snapshot_observed_at":"2026-08-18T11:38:51.217803Z","submitted_at":"2025-01-02T06:23:51Z","title":"HoneypotNet: Backdoor Attacks Against Model Extraction","version":1},"reference_index":48,"source":"arxiv_source","source_observed_at":"2026-08-10T22:39:41.890811Z"},"links":{"citing_paper":"/paper/2501.01090"},"observation_digest":"sha256:ac0ce5c516e98fa8687fdf1de1239f2ad7baf245211c907b6940fde4561daba0","observation_id":"47671234-b107-4ea0-9cd7-9736fe6ad9d3","resolution":{"observed_at":"2026-08-10T22:39:42.237275Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:39:42.220396Z","title":null,"venue":null,"work_id":"150fbefa-d6ba-415e-9755-4fed9dc98477","year":2022},"citing_paper":{"arxiv_id":"2501.01090","last_updated":"2025-01-02T06:23:51Z","snapshot_observed_at":"2026-08-18T11:38:51.217803Z","submitted_at":"2025-01-02T06:23:51Z","title":"HoneypotNet: Backdoor Attacks Against Model Extraction","version":1},"reference_index":49,"source":"arxiv_source","source_observed_at":"2026-08-10T22:39:41.894360Z"},"links":{"citing_paper":"/paper/2501.01090"},"observation_digest":"sha256:a0bfd42bf83de3860759fcbf3db9b3e3f5184532b8018905798f5fba8b56b069","observation_id":"b1a80259-86df-4ff0-9095-cbb307dea4f8","resolution":{"observed_at":"2026-08-10T22:39:42.224110Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:39:42.207740Z","title":null,"venue":null,"work_id":"83a7506e-8daa-47f8-b8ba-c536f393e408","year":2020},"citing_paper":{"arxiv_id":"2501.01090","last_updated":"2025-01-02T06:23:51Z","snapshot_observed_at":"2026-08-18T11:38:51.217803Z","submitted_at":"2025-01-02T06:23:51Z","title":"HoneypotNet: Backdoor Attacks Against Model Extraction","version":1},"reference_index":50,"source":"arxiv_source","source_observed_at":"2026-08-10T22:39:41.898377Z"},"links":{"citing_paper":"/paper/2501.01090"},"observation_digest":"sha256:7d6e3a148a7d70426332536c9e7aeb6376731e3f62c5f4eeab7d7279b0d3995b","observation_id":"81713d82-6860-49dd-8f65-8ce15c700bb2","resolution":{"observed_at":"2026-08-10T22:39:42.211392Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:39:42.194526Z","title":null,"venue":null,"work_id":"a590c3e4-fe81-4a5f-bf36-f7f9d011a69d","year":2024},"citing_paper":{"arxiv_id":"2501.01090","last_updated":"2025-01-02T06:23:51Z","snapshot_observed_at":"2026-08-18T11:38:51.217803Z","submitted_at":"2025-01-02T06:23:51Z","title":"HoneypotNet: Backdoor Attacks Against Model Extraction","version":1},"reference_index":51,"source":"arxiv_source","source_observed_at":"2026-08-10T22:39:41.903055Z"},"links":{"citing_paper":"/paper/2501.01090"},"observation_digest":"sha256:9a1b75fdaad63fb5bc0b416fd387e243a0ca9585bb699f7262011232e4e49dca","observation_id":"bcf6ce6a-948e-4769-8b52-26005fb847d7","resolution":{"observed_at":"2026-08-10T22:39:42.198615Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2306.04192","last_updated":"2023-06-13T07:55:15Z","snapshot_observed_at":"2026-08-18T10:29:12.716747Z","submitted_at":"2023-06-07T07:00:02Z","title":"Extracting Cloud-based Model with Prior Knowledge","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2306.04192","snapshot_observed_at":"2026-08-10T22:39:41.907982Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2501.01090","last_updated":"2025-01-02T06:23:51Z","snapshot_observed_at":"2026-08-18T11:38:51.217803Z","submitted_at":"2025-01-02T06:23:51Z","title":"HoneypotNet: Backdoor Attacks Against Model Extraction","version":1},"reference_index":52,"source":"arxiv_source","source_observed_at":"2026-08-10T22:39:41.907982Z"},"links":{"cited_paper":"/paper/2306.04192","citing_paper":"/paper/2501.01090"},"observation_digest":"sha256:c947923c49cb269091244f866306c24f0fd71aa0d69056eb99e6943760e616e4","observation_id":"f07db78e-0eb3-4663-a70a-cfb329fe4ddb","resolution":{"observed_at":"2026-08-10T22:39:41.907982Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:39:42.181638Z","title":null,"venue":null,"work_id":"444bf13e-154b-4a3c-9210-197c6ef49ecb","year":2024},"citing_paper":{"arxiv_id":"2501.01090","last_updated":"2025-01-02T06:23:51Z","snapshot_observed_at":"2026-08-18T11:38:51.217803Z","submitted_at":"2025-01-02T06:23:51Z","title":"HoneypotNet: Backdoor Attacks Against Model Extraction","version":1},"reference_index":53,"source":"arxiv_source","source_observed_at":"2026-08-10T22:39:41.912876Z"},"links":{"citing_paper":"/paper/2501.01090"},"observation_digest":"sha256:ab16200beb777a9065018503992acf91260d6e0841966385a3f258ed2f506697","observation_id":"408e0737-8d34-4810-8bc2-1adb7012ac03","resolution":{"observed_at":"2026-08-10T22:39:42.185865Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:39:42.168661Z","title":null,"venue":null,"work_id":"36e2182b-6fb0-4d2e-bd14-41ddac2646ad","year":2020},"citing_paper":{"arxiv_id":"2501.01090","last_updated":"2025-01-02T06:23:51Z","snapshot_observed_at":"2026-08-18T11:38:51.217803Z","submitted_at":"2025-01-02T06:23:51Z","title":"HoneypotNet: Backdoor Attacks Against Model Extraction","version":1},"reference_index":54,"source":"arxiv_source","source_observed_at":"2026-08-10T22:39:41.916649Z"},"links":{"citing_paper":"/paper/2501.01090"},"observation_digest":"sha256:9365c50ea3ce627072525a8a3efe7dd847bb2cc6f7e4826ac8baef783b7ecdff","observation_id":"0993d23d-032a-4efb-88fd-fe295fe9789b","resolution":{"observed_at":"2026-08-10T22:39:42.172878Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2501.01090","last_updated":"2025-01-02T06:23:51Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-18T11:38:51.217803Z","submitted_at":"2025-01-02T06:23:51Z","title":"HoneypotNet: Backdoor Attacks Against Model Extraction"},"reference_resolution":{"displayed":54,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":46,"verified_exact":1,"verified_fuzzy":7},"total_outbound_references":54},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"thesis":"As of 18 August 2026, this Paper Citation Record lists 54 of 54 outbound references and 0 inbound Pith citation observations for arXiv:2501.01090."}