{"as_of":"2026-08-19T15:45:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:234c07020094ce4591a6ff493c6507cae4b37ba96542e88912116851eb07c9a2","coverage":[{"denominator":58,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":58,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-10T22:35:26.132746Z","state":"measured"},{"denominator":59,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":59,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-19T06:32:44.657259+00:00","state":"measured"},{"denominator":1,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":1,"source":"paper_references, paper_reference_links","source_observed_at":"2026-07-02T11:45:33.273144Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-07-02T11:46:54.738438Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2501.01263","last_updated":"2025-01-02T13:58:05Z","snapshot_observed_at":"2026-08-19T11:52:39.634768Z","submitted_at":"2025-01-02T13:58:05Z","title":"Stealthy Backdoor Attack to Real-world Models in Android Apps","version":1},"cited_work":{"arxiv_id":"2501.01263","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2501.01263","snapshot_observed_at":"2026-07-02T11:46:54.738438Z","title":"Stealthy backdoor attack to real-world models in android apps.arXiv preprint arXiv:2501.01263, 2025","venue":null,"work_id":"43518ee5-b6a8-4979-a2ec-61337e96b7c6","year":2025},"citing_paper":{"arxiv_id":"2607.00362","last_updated":"2026-07-01T03:00:30Z","snapshot_observed_at":"2026-07-07T00:06:03.968882Z","submitted_at":"2026-07-01T03:00:30Z","title":"SoK: Attack and Defense Landscape of Mobile On-device AI Systems","version":1},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-07-02T11:45:33.273144Z"},"links":{"cited_paper":"/paper/2501.01263","citing_paper":"/paper/2607.00362"},"observation_digest":"sha256:e8523efa57c924ce054f7c57f94414e09041b5f55a2553ad7690406727e59b41","observation_id":"4e99cfdb-600b-4cbb-ad54-b7e694a6789e","resolution":{"observed_at":"2026-07-02T11:46:54.740085Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2501.01263/citation-record","integrity":"/paper/2501.01263/integrity","json":"/paper/2501.01263/citation-record.json","paper":"/paper/2501.01263"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:35:27.301573Z","title":"Multi-modal fusion transformer for end-to-end autonomous driving,","venue":null,"work_id":"6b8d0d66-8b6d-4f01-a530-ba8fe5f16c15","year":2021},"citing_paper":{"arxiv_id":"2501.01263","last_updated":"2025-01-02T13:58:05Z","snapshot_observed_at":"2026-08-19T11:52:39.634768Z","submitted_at":"2025-01-02T13:58:05Z","title":"Stealthy Backdoor Attack to Real-world Models in Android Apps","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-10T22:35:25.791905Z"},"links":{"citing_paper":"/paper/2501.01263"},"observation_digest":"sha256:42fc7d9067de2b0cedf7c1a8f8c385de71c5337e6844d792a87c0def0ac83fc6","observation_id":"56c044be-e4c4-472f-ab4c-cae7efee86e5","resolution":{"observed_at":"2026-08-10T22:35:27.307661Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:35:27.276787Z","title":"Transformers in medical imaging: A survey,","venue":null,"work_id":"4233b6b5-98e9-47b2-9141-729a3cd5a62a","year":2023},"citing_paper":{"arxiv_id":"2501.01263","last_updated":"2025-01-02T13:58:05Z","snapshot_observed_at":"2026-08-19T11:52:39.634768Z","submitted_at":"2025-01-02T13:58:05Z","title":"Stealthy Backdoor Attack to Real-world Models in Android Apps","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-10T22:35:25.799022Z"},"links":{"citing_paper":"/paper/2501.01263"},"observation_digest":"sha256:49228919a8a9813f72c11a21d351214f19b596c110e037328a98ef4660f9fa0b","observation_id":"51374fc0-6ddc-497d-9083-4c51bced9a4b","resolution":{"observed_at":"2026-08-10T22:35:27.283639Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:35:27.258309Z","title":"Killing two birds with one stone: Efficient and robust training of face recognition cnns by partial fc,","venue":null,"work_id":"96040072-7822-4d47-b5ba-724d1f984e08","year":2022},"citing_paper":{"arxiv_id":"2501.01263","last_updated":"2025-01-02T13:58:05Z","snapshot_observed_at":"2026-08-19T11:52:39.634768Z","submitted_at":"2025-01-02T13:58:05Z","title":"Stealthy Backdoor Attack to Real-world Models in Android Apps","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-10T22:35:25.804567Z"},"links":{"citing_paper":"/paper/2501.01263"},"observation_digest":"sha256:bd82f42101f58ded20770faaf49804fe6bd9a5119d5c36e5338bfcdec1c0f88c","observation_id":"b638fd74-ae9e-4d37-be83-6eca53f785fe","resolution":{"observed_at":"2026-08-10T22:35:27.263881Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:35:27.237565Z","title":"Robustness of on-device models: Adversarial attack to deep learning models on android apps,","venue":null,"work_id":"7729421b-dd0e-43a6-a187-924d644dd4a6","year":2021},"citing_paper":{"arxiv_id":"2501.01263","last_updated":"2025-01-02T13:58:05Z","snapshot_observed_at":"2026-08-19T11:52:39.634768Z","submitted_at":"2025-01-02T13:58:05Z","title":"Stealthy Backdoor Attack to Real-world Models in Android Apps","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-10T22:35:25.810228Z"},"links":{"citing_paper":"/paper/2501.01263"},"observation_digest":"sha256:c96e07b525b44d386f863b2b5580117e5e69c2edeb156d169f432dac03a75328","observation_id":"97740b81-4d0e-4a38-a080-ff1ca4f3caa7","resolution":{"observed_at":"2026-08-10T22:35:27.243367Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:35:27.196261Z","title":"Smart app attack: Hacking deep learning models in android apps,","venue":null,"work_id":"a5b7be45-581b-485a-9080-705abbf58415","year":2022},"citing_paper":{"arxiv_id":"2501.01263","last_updated":"2025-01-02T13:58:05Z","snapshot_observed_at":"2026-08-19T11:52:39.634768Z","submitted_at":"2025-01-02T13:58:05Z","title":"Stealthy Backdoor Attack to Real-world Models in Android Apps","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-10T22:35:25.821947Z"},"links":{"citing_paper":"/paper/2501.01263"},"observation_digest":"sha256:a5848fe19880ae135958d4211f090d266e417815ec0c4f518a6d60d775f335e7","observation_id":"8f9287c8-920c-445f-ac1f-f956dd887ae8","resolution":{"observed_at":"2026-08-10T22:35:27.202170Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:35:27.169656Z","title":"Adversary for social good: Protecting familial privacy through joint adversarial attacks,","venue":null,"work_id":"5af9dbe5-e239-4354-a004-46752763b72e","year":2020},"citing_paper":{"arxiv_id":"2501.01263","last_updated":"2025-01-02T13:58:05Z","snapshot_observed_at":"2026-08-19T11:52:39.634768Z","submitted_at":"2025-01-02T13:58:05Z","title":"Stealthy Backdoor Attack to Real-world Models in Android Apps","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-10T22:35:25.828211Z"},"links":{"citing_paper":"/paper/2501.01263"},"observation_digest":"sha256:97099fcb1678493b6637e5ad43c5031c39b784e6433b209d737d954e740d7d83","observation_id":"330667f1-82d0-4f4a-a8ad-72e4b5fd0fae","resolution":{"observed_at":"2026-08-10T22:35:27.175312Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:35:27.151445Z","title":"Machine learning on mobile: An on-device inference app for skin cancer detec- tion,","venue":null,"work_id":"c6a993b2-439d-424b-b494-a1169713c0bf","year":2019},"citing_paper":{"arxiv_id":"2501.01263","last_updated":"2025-01-02T13:58:05Z","snapshot_observed_at":"2026-08-19T11:52:39.634768Z","submitted_at":"2025-01-02T13:58:05Z","title":"Stealthy Backdoor Attack to Real-world Models in Android Apps","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-10T22:35:25.833234Z"},"links":{"citing_paper":"/paper/2501.01263"},"observation_digest":"sha256:53b12fde9e0a828ec6300f0ca8d516e9fe77fca3c03cab1c22c10322c4c7fe90","observation_id":"e01456dd-1e87-40dd-ae46-f423680f6137","resolution":{"observed_at":"2026-08-10T22:35:27.157402Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:35:27.133856Z","title":"A first look at deep learning apps on smartphones,","venue":null,"work_id":"2398615b-dfa3-458d-afb7-a1dad86df2a2","year":2019},"citing_paper":{"arxiv_id":"2501.01263","last_updated":"2025-01-02T13:58:05Z","snapshot_observed_at":"2026-08-19T11:52:39.634768Z","submitted_at":"2025-01-02T13:58:05Z","title":"Stealthy Backdoor Attack to Real-world Models in Android Apps","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-10T22:35:25.838592Z"},"links":{"citing_paper":"/paper/2501.01263"},"observation_digest":"sha256:7e833d584d1abf52ff3815b030f2182b0c8f52c551c47477b1520b33bf1b4bb7","observation_id":"bb9dd722-c7e4-4c05-b36a-c0f509f6705d","resolution":{"observed_at":"2026-08-10T22:35:27.139738Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:35:27.115885Z","title":"A comprehensive benchmark of deep learning libraries on mobile devices,","venue":null,"work_id":"4c1f968a-894a-43cd-88ce-6827818a4a1c","year":2022},"citing_paper":{"arxiv_id":"2501.01263","last_updated":"2025-01-02T13:58:05Z","snapshot_observed_at":"2026-08-19T11:52:39.634768Z","submitted_at":"2025-01-02T13:58:05Z","title":"Stealthy Backdoor Attack to Real-world Models in Android Apps","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-10T22:35:25.843547Z"},"links":{"citing_paper":"/paper/2501.01263"},"observation_digest":"sha256:19a8fb4aed16680cebe38ce0239854279d4fbc44b9aa37b70225a777d33fcf3f","observation_id":"da2add1d-9fdc-460b-911e-8869a31cb9d5","resolution":{"observed_at":"2026-08-10T22:35:27.121487Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:35:27.098765Z","title":"Tensorflow lite,","venue":null,"work_id":"fc240b2f-bcf4-4f35-856a-b2c24812da04","year":2021},"citing_paper":{"arxiv_id":"2501.01263","last_updated":"2025-01-02T13:58:05Z","snapshot_observed_at":"2026-08-19T11:52:39.634768Z","submitted_at":"2025-01-02T13:58:05Z","title":"Stealthy Backdoor Attack to Real-world Models in Android Apps","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-10T22:35:25.848543Z"},"links":{"citing_paper":"/paper/2501.01263"},"observation_digest":"sha256:acbb7b4a2e22ce57ec75e151c49f25e4f8a51d575c344f106fc57f3e4e697241","observation_id":"60029fb3-3d1a-4bfb-9c8f-5147d7899ce9","resolution":{"observed_at":"2026-08-10T22:35:27.104582Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:35:27.081323Z","title":null,"venue":null,"work_id":"ca80a608-8808-43bc-8560-62571743c9d1","year":2021},"citing_paper":{"arxiv_id":"2501.01263","last_updated":"2025-01-02T13:58:05Z","snapshot_observed_at":"2026-08-19T11:52:39.634768Z","submitted_at":"2025-01-02T13:58:05Z","title":"Stealthy Backdoor Attack to Real-world Models in Android Apps","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-10T22:35:25.853952Z"},"links":{"citing_paper":"/paper/2501.01263"},"observation_digest":"sha256:42253679235feb541796bc68142f57341bef8ae6e1afe74f4232f2eb68c80169","observation_id":"77eeb881-7e45-4297-ab47-57b47d918764","resolution":{"observed_at":"2026-08-10T22:35:27.086462Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:35:27.065115Z","title":"Mind your weight(s): A large- scale study on insufficient machine learning model protection in mobile apps,","venue":null,"work_id":"957f8dd9-9f5d-44d9-ad55-2c9fbf91b794","year":2021},"citing_paper":{"arxiv_id":"2501.01263","last_updated":"2025-01-02T13:58:05Z","snapshot_observed_at":"2026-08-19T11:52:39.634768Z","submitted_at":"2025-01-02T13:58:05Z","title":"Stealthy Backdoor Attack to Real-world Models in Android Apps","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-10T22:35:25.859190Z"},"links":{"citing_paper":"/paper/2501.01263"},"observation_digest":"sha256:3ded8c08b836405716066454207f19dc985f14ddec8681ecbb98b0d5ba92f7bf","observation_id":"b4d7c25c-f1a6-4604-98e6-f6086c769aa6","resolution":{"observed_at":"2026-08-10T22:35:27.070314Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:35:27.045867Z","title":"Under- standing real-world threats to deep learning models in android apps,","venue":null,"work_id":"73e22c69-645c-49fa-a974-740d311e967a","year":2022},"citing_paper":{"arxiv_id":"2501.01263","last_updated":"2025-01-02T13:58:05Z","snapshot_observed_at":"2026-08-19T11:52:39.634768Z","submitted_at":"2025-01-02T13:58:05Z","title":"Stealthy Backdoor Attack to Real-world Models in Android Apps","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-10T22:35:25.864631Z"},"links":{"citing_paper":"/paper/2501.01263"},"observation_digest":"sha256:b4223caf9aa99566a0d64c3fa2fccab54bfb42f667f7b631147f8f7b9a670ac6","observation_id":"b07b2133-4ced-4b8d-97e1-20fa94fb033e","resolution":{"observed_at":"2026-08-10T22:35:27.052038Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:35:27.027954Z","title":"Backdoor learning: A survey,","venue":null,"work_id":"561b01e3-d420-417a-818f-d8c36945a068","year":2022},"citing_paper":{"arxiv_id":"2501.01263","last_updated":"2025-01-02T13:58:05Z","snapshot_observed_at":"2026-08-19T11:52:39.634768Z","submitted_at":"2025-01-02T13:58:05Z","title":"Stealthy Backdoor Attack to Real-world Models in Android Apps","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-10T22:35:25.871524Z"},"links":{"citing_paper":"/paper/2501.01263"},"observation_digest":"sha256:424e40b290bbfc0a17211d266a7af3bcab964d914996f8351393b493280e5e70","observation_id":"be759d19-eea9-437b-a0af-3b64710ac21c","resolution":{"observed_at":"2026-08-10T22:35:27.033997Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:35:27.010925Z","title":"Badnl: Backdoor attacks against nlp models with semantic- preserving improvements,","venue":null,"work_id":"1627071d-97ad-41e2-8282-d2e8239e6500","year":2021},"citing_paper":{"arxiv_id":"2501.01263","last_updated":"2025-01-02T13:58:05Z","snapshot_observed_at":"2026-08-19T11:52:39.634768Z","submitted_at":"2025-01-02T13:58:05Z","title":"Stealthy Backdoor Attack to Real-world Models in Android Apps","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-10T22:35:25.877278Z"},"links":{"citing_paper":"/paper/2501.01263"},"observation_digest":"sha256:0e55491ab715d32c755d4585473c2f93c407b5190ede99d6e622da9defb4546f","observation_id":"3122ec1e-444a-438d-9abf-13c09c8336d5","resolution":{"observed_at":"2026-08-10T22:35:27.016649Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:35:25.882489Z","title":"Deepinspect: A black-box trojan detection and mitigation framework for deep neural networks","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2501.01263","last_updated":"2025-01-02T13:58:05Z","snapshot_observed_at":"2026-08-19T11:52:39.634768Z","submitted_at":"2025-01-02T13:58:05Z","title":"Stealthy Backdoor Attack to Real-world Models in Android Apps","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-10T22:35:25.882489Z"},"links":{"citing_paper":"/paper/2501.01263"},"observation_digest":"sha256:fbe9936b10d9c4901d68d043e22efee240cebcb9c5532675e128c7aed4dfa6ae","observation_id":"cc83f13d-2031-43b2-9542-e5c9439b91e1","resolution":{"observed_at":"2026-08-10T22:35:25.882489Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1908.01763","last_updated":"2019-08-08T22:59:45Z","snapshot_observed_at":"2026-08-14T15:58:40.919450Z","submitted_at":"2019-08-02T22:46:03Z","title":"TABOR: A Highly Accurate Approach to Inspecting and Restoring Trojan Backdoors in AI Systems","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1908.01763","snapshot_observed_at":"2026-08-10T22:35:25.887391Z","title":"Tabor: A highly accurate approach to inspecting and restoring trojan backdoors in ai systems,","venue":null,"work_id":null,"year":1908},"citing_paper":{"arxiv_id":"2501.01263","last_updated":"2025-01-02T13:58:05Z","snapshot_observed_at":"2026-08-19T11:52:39.634768Z","submitted_at":"2025-01-02T13:58:05Z","title":"Stealthy Backdoor Attack to Real-world Models in Android Apps","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-10T22:35:25.887391Z"},"links":{"cited_paper":"/paper/1908.01763","citing_paper":"/paper/2501.01263"},"observation_digest":"sha256:faa19f78fa754dc6d09fbcc245987286cd4205a7eee341c075b2472cc523fe60","observation_id":"1eeecefb-abcf-4860-82bc-40e3cee95a31","resolution":{"observed_at":"2026-08-10T22:35:25.887391Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:35:26.984107Z","title":"Composite backdoor attack for deep neural network by mixing existing benign features,","venue":null,"work_id":"35c15613-6af4-4f3e-9cd6-8ede2e7a29bf","year":2020},"citing_paper":{"arxiv_id":"2501.01263","last_updated":"2025-01-02T13:58:05Z","snapshot_observed_at":"2026-08-19T11:52:39.634768Z","submitted_at":"2025-01-02T13:58:05Z","title":"Stealthy Backdoor Attack to Real-world Models in Android Apps","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-10T22:35:25.897320Z"},"links":{"citing_paper":"/paper/2501.01263"},"observation_digest":"sha256:5345d2cbc9034f7c11242071a1505840c2bc676de203f4b308019b3ee15298ec","observation_id":"2ed269fe-5573-494e-a001-999770531280","resolution":{"observed_at":"2026-08-10T22:35:26.989346Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:35:25.904234Z","title":"How to backdoor federated learning,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2501.01263","last_updated":"2025-01-02T13:58:05Z","snapshot_observed_at":"2026-08-19T11:52:39.634768Z","submitted_at":"2025-01-02T13:58:05Z","title":"Stealthy Backdoor Attack to Real-world Models in Android Apps","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-10T22:35:25.904234Z"},"links":{"citing_paper":"/paper/2501.01263"},"observation_digest":"sha256:dad340787c5ba45a98fa19ee8631c8f33809c5199c3d663bc2785993c04b7734","observation_id":"e6f79bf4-b022-4c0a-a243-22d9db6d607f","resolution":{"observed_at":"2026-08-10T22:35:25.904234Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:35:25.910184Z","title":"Blind backdoors in deep learning models,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2501.01263","last_updated":"2025-01-02T13:58:05Z","snapshot_observed_at":"2026-08-19T11:52:39.634768Z","submitted_at":"2025-01-02T13:58:05Z","title":"Stealthy Backdoor Attack to Real-world Models in Android Apps","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-10T22:35:25.910184Z"},"links":{"citing_paper":"/paper/2501.01263"},"observation_digest":"sha256:e642c67795e59be575fb1af95df39f8044c36814bf29f1d2e649b09fc3d6f369","observation_id":"60aca403-7403-48a2-97bd-83308d14a62f","resolution":{"observed_at":"2026-08-10T22:35:25.910184Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:35:25.915451Z","title":"Badnets: Evaluating backdooring attacks on deep neural networks,","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2501.01263","last_updated":"2025-01-02T13:58:05Z","snapshot_observed_at":"2026-08-19T11:52:39.634768Z","submitted_at":"2025-01-02T13:58:05Z","title":"Stealthy Backdoor Attack to Real-world Models in Android Apps","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-10T22:35:25.915451Z"},"links":{"citing_paper":"/paper/2501.01263"},"observation_digest":"sha256:c6a5dc3504cbb5c4749a7a53f14e98232d62921087b3dc79a159d5837fa54959","observation_id":"db76a302-b428-4893-a394-916b86f948df","resolution":{"observed_at":"2026-08-10T22:35:25.915451Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:35:26.936309Z","title":"Reflection backdoor: A natural backdoor attack on deep neural networks,","venue":null,"work_id":"c8507d47-58e8-49dd-b410-91c7ea29a450","year":2020},"citing_paper":{"arxiv_id":"2501.01263","last_updated":"2025-01-02T13:58:05Z","snapshot_observed_at":"2026-08-19T11:52:39.634768Z","submitted_at":"2025-01-02T13:58:05Z","title":"Stealthy Backdoor Attack to Real-world Models in Android Apps","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-10T22:35:25.921333Z"},"links":{"citing_paper":"/paper/2501.01263"},"observation_digest":"sha256:cf63ee4c2430d59b734a0d652821067f4cadd798af027b146a1840219b1c92f9","observation_id":"6c8f0dc3-c19a-4f83-8526-1c8bd6049a45","resolution":{"observed_at":"2026-08-10T22:35:26.941723Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:35:25.926625Z","title":"Weight poisoning attacks on pretrained models,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2501.01263","last_updated":"2025-01-02T13:58:05Z","snapshot_observed_at":"2026-08-19T11:52:39.634768Z","submitted_at":"2025-01-02T13:58:05Z","title":"Stealthy Backdoor Attack to Real-world Models in Android Apps","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-10T22:35:25.926625Z"},"links":{"citing_paper":"/paper/2501.01263"},"observation_digest":"sha256:80278a53da399c2224ad867d54a4d6829f7617f4752a5681dae180a6650361a3","observation_id":"2e2123ab-6a90-4e6d-a0b5-5ab8968a4235","resolution":{"observed_at":"2026-08-10T22:35:25.926625Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:35:26.906159Z","title":"Backdoor attacks against transfer learning with pre-trained deep learn- ing models,","venue":null,"work_id":"9fc820c8-28e4-4a49-8956-e4ea5e304acc","year":2020},"citing_paper":{"arxiv_id":"2501.01263","last_updated":"2025-01-02T13:58:05Z","snapshot_observed_at":"2026-08-19T11:52:39.634768Z","submitted_at":"2025-01-02T13:58:05Z","title":"Stealthy Backdoor Attack to Real-world Models in Android Apps","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-10T22:35:25.933827Z"},"links":{"citing_paper":"/paper/2501.01263"},"observation_digest":"sha256:e55d36d7cc269a821733b2f44f8b9406c1f59bb1648b3623977622cddc268709","observation_id":"836cb4d1-b934-40c2-9c52-05341600c40f","resolution":{"observed_at":"2026-08-10T22:35:26.911344Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:35:26.886563Z","title":"Backdooring convolutional neural net- works via targeted weight perturbations,","venue":null,"work_id":"4817e653-5fde-4bae-8abe-dad09e43b371","year":2020},"citing_paper":{"arxiv_id":"2501.01263","last_updated":"2025-01-02T13:58:05Z","snapshot_observed_at":"2026-08-19T11:52:39.634768Z","submitted_at":"2025-01-02T13:58:05Z","title":"Stealthy Backdoor Attack to Real-world Models in Android Apps","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-10T22:35:25.939409Z"},"links":{"citing_paper":"/paper/2501.01263"},"observation_digest":"sha256:72278e7a9aa41c13c33f4155103d040de79f4a4c0825e9a449d379c034cc4cfb","observation_id":"655e0d6d-cd04-4b4d-b86b-9e7fb0b91f0e","resolution":{"observed_at":"2026-08-10T22:35:26.893779Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:35:26.866122Z","title":"Tbt: Targeted neural network attack with bit trojan,","venue":null,"work_id":"db096308-95de-4ca6-8e34-6a01412cb9f1","year":2020},"citing_paper":{"arxiv_id":"2501.01263","last_updated":"2025-01-02T13:58:05Z","snapshot_observed_at":"2026-08-19T11:52:39.634768Z","submitted_at":"2025-01-02T13:58:05Z","title":"Stealthy Backdoor Attack to Real-world Models in Android Apps","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-10T22:35:25.945069Z"},"links":{"citing_paper":"/paper/2501.01263"},"observation_digest":"sha256:f229f7e54672ba9f219f1ca349bd9daffde203231b935e7cd6b55b0b7e0d2975","observation_id":"a4ea0323-851b-470e-9ea6-60db1b78a687","resolution":{"observed_at":"2026-08-10T22:35:26.873171Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:35:25.955005Z","title":"An embarrassingly simple approach for trojan attack in deep neural networks,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2501.01263","last_updated":"2025-01-02T13:58:05Z","snapshot_observed_at":"2026-08-19T11:52:39.634768Z","submitted_at":"2025-01-02T13:58:05Z","title":"Stealthy Backdoor Attack to Real-world Models in Android Apps","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-10T22:35:25.955005Z"},"links":{"citing_paper":"/paper/2501.01263"},"observation_digest":"sha256:a6e08531b3886156b0e749fa0cdfbbae3e21d0738ce8f80cd05ccf0aaa07da91","observation_id":"67dd8d31-044e-467e-92ba-1b9b0f092429","resolution":{"observed_at":"2026-08-10T22:35:25.955005Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1712.05526","last_updated":"2017-12-15T04:26:26Z","snapshot_observed_at":"2026-07-06T06:14:30.795326Z","submitted_at":"2017-12-15T04:26:26Z","title":"Targeted Backdoor Attacks on Deep Learning Systems Using Data Poisoning","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1712.05526","snapshot_observed_at":"2026-08-10T22:35:25.960261Z","title":"Targeted backdoor attacks on deep learning systems using data poisoning,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2501.01263","last_updated":"2025-01-02T13:58:05Z","snapshot_observed_at":"2026-08-19T11:52:39.634768Z","submitted_at":"2025-01-02T13:58:05Z","title":"Stealthy Backdoor Attack to Real-world Models in Android Apps","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-10T22:35:25.960261Z"},"links":{"cited_paper":"/paper/1712.05526","citing_paper":"/paper/2501.01263"},"observation_digest":"sha256:7314acebc79aa30a1433c384709b85131138f16d1f70f7ceed59833c159190e5","observation_id":"489806a7-c096-41df-8516-a06599a052bb","resolution":{"observed_at":"2026-08-10T22:35:25.960261Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1912.02771","last_updated":"2019-12-06T23:16:45Z","snapshot_observed_at":"2026-08-10T18:11:31.253134Z","submitted_at":"2019-12-05T18:05:59Z","title":"Label-Consistent Backdoor Attacks","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1912.02771","snapshot_observed_at":"2026-08-10T22:35:25.966861Z","title":"Label-consistent backdoor at- tacks,","venue":null,"work_id":null,"year":1912},"citing_paper":{"arxiv_id":"2501.01263","last_updated":"2025-01-02T13:58:05Z","snapshot_observed_at":"2026-08-19T11:52:39.634768Z","submitted_at":"2025-01-02T13:58:05Z","title":"Stealthy Backdoor Attack to Real-world Models in Android Apps","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-10T22:35:25.966861Z"},"links":{"cited_paper":"/paper/1912.02771","citing_paper":"/paper/2501.01263"},"observation_digest":"sha256:7467b8df2bc2567a5ff09043ac9edf916bffcaa2bd1413217616ab327133e02f","observation_id":"fc07caf4-04ca-4829-8856-3aee9bb358b1","resolution":{"observed_at":"2026-08-10T22:35:25.966861Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:35:26.847318Z","title":"Invisible backdoor attacks on deep neural networks via steganography and regularization,","venue":null,"work_id":"b9b397d4-4c18-4ba4-93ae-e6355151fed9","year":2020},"citing_paper":{"arxiv_id":"2501.01263","last_updated":"2025-01-02T13:58:05Z","snapshot_observed_at":"2026-08-19T11:52:39.634768Z","submitted_at":"2025-01-02T13:58:05Z","title":"Stealthy Backdoor Attack to Real-world Models in Android Apps","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-10T22:35:25.973552Z"},"links":{"citing_paper":"/paper/2501.01263"},"observation_digest":"sha256:ba8bb58a2e5a842776de45a6d11954dd739906606b412d099e46e65c9c640e27","observation_id":"1fa58a73-dacd-4f5e-b018-ff3d1a24d563","resolution":{"observed_at":"2026-08-10T22:35:26.852777Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:35:25.978680Z","title":"Invisible backdoor attack with sample-specific triggers,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2501.01263","last_updated":"2025-01-02T13:58:05Z","snapshot_observed_at":"2026-08-19T11:52:39.634768Z","submitted_at":"2025-01-02T13:58:05Z","title":"Stealthy Backdoor Attack to Real-world Models in Android Apps","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-10T22:35:25.978680Z"},"links":{"citing_paper":"/paper/2501.01263"},"observation_digest":"sha256:db9fb476b12af9812dbb47e4f0e51fd7ebfe87751fe7fd63f090614cf66b4cce","observation_id":"897b64a7-36f1-4119-8d3b-69aad79c4b5d","resolution":{"observed_at":"2026-08-10T22:35:25.978680Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:35:26.818526Z","title":"Backdoor attack with sparse and invisible trigger,","venue":null,"work_id":"255986ee-0730-4bd9-803e-58bd437dd859","year":2024},"citing_paper":{"arxiv_id":"2501.01263","last_updated":"2025-01-02T13:58:05Z","snapshot_observed_at":"2026-08-19T11:52:39.634768Z","submitted_at":"2025-01-02T13:58:05Z","title":"Stealthy Backdoor Attack to Real-world Models in Android Apps","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-10T22:35:25.984305Z"},"links":{"citing_paper":"/paper/2501.01263"},"observation_digest":"sha256:7455544696535b091a2137c60c405c3ae78043a0da3224da5348f11d46bfee9b","observation_id":"a3260270-d4d0-4fd4-b9dd-6a855567842c","resolution":{"observed_at":"2026-08-10T22:35:26.824087Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:35:26.802232Z","title":"Deeppayload: Black- box backdoor attack on deep learning models through neural payload injection,","venue":null,"work_id":"bea7925a-67f2-4165-8598-cf2a18192219","year":2021},"citing_paper":{"arxiv_id":"2501.01263","last_updated":"2025-01-02T13:58:05Z","snapshot_observed_at":"2026-08-19T11:52:39.634768Z","submitted_at":"2025-01-02T13:58:05Z","title":"Stealthy Backdoor Attack to Real-world Models in Android Apps","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-10T22:35:25.990210Z"},"links":{"citing_paper":"/paper/2501.01263"},"observation_digest":"sha256:e80191b04969202d4288012849beb2003ba031027e8ce5bac418393518bba509","observation_id":"07bd4d51-2d2c-46d0-8c30-53131fa9dd75","resolution":{"observed_at":"2026-08-10T22:35:26.807407Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:35:26.784340Z","title":"Stegastamp: Invisible hyperlinks in physical photographs,","venue":null,"work_id":"d0940bc9-c177-4911-8953-18e9d0a39c9e","year":2020},"citing_paper":{"arxiv_id":"2501.01263","last_updated":"2025-01-02T13:58:05Z","snapshot_observed_at":"2026-08-19T11:52:39.634768Z","submitted_at":"2025-01-02T13:58:05Z","title":"Stealthy Backdoor Attack to Real-world Models in Android Apps","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-10T22:35:25.996218Z"},"links":{"citing_paper":"/paper/2501.01263"},"observation_digest":"sha256:0da59a0d8df56c4183e25a83a6ffb07a0393447735b6c1d6d25d6f261bbd3e44","observation_id":"f3162b90-5209-43da-92ff-62c90b4f1f37","resolution":{"observed_at":"2026-08-10T22:35:26.790408Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:35:26.764271Z","title":"Deep feature space trojan attack of neural networks by controlled detoxification,","venue":null,"work_id":"1e93f97e-f3e4-4d55-b2d1-9777b02901b5","year":2021},"citing_paper":{"arxiv_id":"2501.01263","last_updated":"2025-01-02T13:58:05Z","snapshot_observed_at":"2026-08-19T11:52:39.634768Z","submitted_at":"2025-01-02T13:58:05Z","title":"Stealthy Backdoor Attack to Real-world Models in Android Apps","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-10T22:35:26.002404Z"},"links":{"citing_paper":"/paper/2501.01263"},"observation_digest":"sha256:fe54b5cb3cbaadd9a8dcc9fdc977e39f96af2a129f1cf965d1d4c1c61c459b48","observation_id":"26f87ed6-9791-447d-8ff2-574555f88026","resolution":{"observed_at":"2026-08-10T22:35:26.771303Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:35:26.745546Z","title":"Backdoor embedding in convolutional neural network models via invisible perturbation,","venue":null,"work_id":"da767f82-e639-4c6b-b60c-c27c6a22667f","year":2020},"citing_paper":{"arxiv_id":"2501.01263","last_updated":"2025-01-02T13:58:05Z","snapshot_observed_at":"2026-08-19T11:52:39.634768Z","submitted_at":"2025-01-02T13:58:05Z","title":"Stealthy Backdoor Attack to Real-world Models in Android Apps","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-10T22:35:26.008850Z"},"links":{"citing_paper":"/paper/2501.01263"},"observation_digest":"sha256:3b47f00a3dc7c7094498903db12185e23d76721a6107dd37158fc639b557289a","observation_id":"94824a63-d031-456e-b134-b9cb2f3435a4","resolution":{"observed_at":"2026-08-10T22:35:26.751218Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:35:26.728423Z","title":"Universal adversarial perturbations,","venue":null,"work_id":"051ec3b3-8afb-4813-bb98-1f2524743e27","year":2017},"citing_paper":{"arxiv_id":"2501.01263","last_updated":"2025-01-02T13:58:05Z","snapshot_observed_at":"2026-08-19T11:52:39.634768Z","submitted_at":"2025-01-02T13:58:05Z","title":"Stealthy Backdoor Attack to Real-world Models in Android Apps","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-10T22:35:26.013369Z"},"links":{"citing_paper":"/paper/2501.01263"},"observation_digest":"sha256:cd8e5ce6f7de2f2f3327a86bee192483e0fe779264f16b15800f72ab2256dc19","observation_id":"ce84a997-c048-4a08-a1bd-1ae7715ecc49","resolution":{"observed_at":"2026-08-10T22:35:26.733731Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:35:26.686416Z","title":"Backdoor attack on deep learning-based medical image encryption and decryption network,","venue":null,"work_id":"f216280f-2e70-41f8-8eb6-13eb3608c4f1","year":2024},"citing_paper":{"arxiv_id":"2501.01263","last_updated":"2025-01-02T13:58:05Z","snapshot_observed_at":"2026-08-19T11:52:39.634768Z","submitted_at":"2025-01-02T13:58:05Z","title":"Stealthy Backdoor Attack to Real-world Models in Android Apps","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-10T22:35:26.023443Z"},"links":{"citing_paper":"/paper/2501.01263"},"observation_digest":"sha256:fa0d296822e0441c314a62f4288e7ec5e6975c36e2394f1bb37c8ec66ddb0d43","observation_id":"a7f75fbe-29ed-469f-a17d-95fdd54c21b1","resolution":{"observed_at":"2026-08-10T22:35:26.694273Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:35:26.028279Z","title":"Eyeriss: A spatial architecture for energy-efficient dataflow for convolutional neural networks,","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2501.01263","last_updated":"2025-01-02T13:58:05Z","snapshot_observed_at":"2026-08-19T11:52:39.634768Z","submitted_at":"2025-01-02T13:58:05Z","title":"Stealthy Backdoor Attack to Real-world Models in Android Apps","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-10T22:35:26.028279Z"},"links":{"citing_paper":"/paper/2501.01263"},"observation_digest":"sha256:0a1e79b85be9748b9cb96bdc7c38b0e6f0082a7053139f1e56d768c52ec69100","observation_id":"011e80a5-69c9-4f58-bea3-45e097af3d66","resolution":{"observed_at":"2026-08-10T22:35:26.028279Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2003.12172","last_updated":"2020-06-12T14:40:56Z","snapshot_observed_at":"2026-08-15T04:08:31.080041Z","submitted_at":"2020-03-26T22:24:56Z","title":"Edge Intelligence: Architectures, Challenges, and Applications","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2003.12172","snapshot_observed_at":"2026-08-10T22:35:26.033145Z","title":"Edge intelligence: Architectures, challenges, and applications,","venue":null,"work_id":null,"year":2003},"citing_paper":{"arxiv_id":"2501.01263","last_updated":"2025-01-02T13:58:05Z","snapshot_observed_at":"2026-08-19T11:52:39.634768Z","submitted_at":"2025-01-02T13:58:05Z","title":"Stealthy Backdoor Attack to Real-world Models in Android Apps","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-10T22:35:26.033145Z"},"links":{"cited_paper":"/paper/2003.12172","citing_paper":"/paper/2501.01263"},"observation_digest":"sha256:31e272c54e0b293d46d40306680555dca786639583a9a70acc86fb0b7c8d6741","observation_id":"c060de48-0ad4-4b1b-85e3-037d6f786778","resolution":{"observed_at":"2026-08-10T22:35:26.033145Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:35:26.653243Z","title":"Tensorflow hub,","venue":null,"work_id":"82513efb-578d-4fb1-8b0a-73460585992b","year":2021},"citing_paper":{"arxiv_id":"2501.01263","last_updated":"2025-01-02T13:58:05Z","snapshot_observed_at":"2026-08-19T11:52:39.634768Z","submitted_at":"2025-01-02T13:58:05Z","title":"Stealthy Backdoor Attack to Real-world Models in Android Apps","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-10T22:35:26.039683Z"},"links":{"citing_paper":"/paper/2501.01263"},"observation_digest":"sha256:92d4e19f29c6590a0b9d440bdc69015ad61e6359ead4adfb1834d131b9a4a33f","observation_id":"1a3da2d6-489f-4c3d-b043-f89f5c4c1e5a","resolution":{"observed_at":"2026-08-10T22:35:26.660531Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:35:26.632926Z","title":null,"venue":null,"work_id":"fb9be88b-4a15-49cb-939f-244d8ceb62a7","year":2021},"citing_paper":{"arxiv_id":"2501.01263","last_updated":"2025-01-02T13:58:05Z","snapshot_observed_at":"2026-08-19T11:52:39.634768Z","submitted_at":"2025-01-02T13:58:05Z","title":"Stealthy Backdoor Attack to Real-world Models in Android Apps","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-10T22:35:26.044305Z"},"links":{"citing_paper":"/paper/2501.01263"},"observation_digest":"sha256:224d95b48bf97a150e352aa728e2675629959b6abe2b30e7ebf8b52bff536a0c","observation_id":"d0e90df5-0154-4983-b200-99b6fe70992c","resolution":{"observed_at":"2026-08-10T22:35:26.639352Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:35:26.610933Z","title":"Investigating white- box attacks for on-device models,","venue":null,"work_id":"e6071968-5673-4228-b7b3-7771735feef3","year":2024},"citing_paper":{"arxiv_id":"2501.01263","last_updated":"2025-01-02T13:58:05Z","snapshot_observed_at":"2026-08-19T11:52:39.634768Z","submitted_at":"2025-01-02T13:58:05Z","title":"Stealthy Backdoor Attack to Real-world Models in Android Apps","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-10T22:35:26.049918Z"},"links":{"citing_paper":"/paper/2501.01263"},"observation_digest":"sha256:1e49106550688147729e7e07501f370f8c4f44e1f4b3efee5e78c65b5525510c","observation_id":"dd7ec390-d701-465e-b021-f9e81955b482","resolution":{"observed_at":"2026-08-10T22:35:26.617714Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:35:26.587711Z","title":"Apktool: A tool for reverse engineering android apk files","venue":null,"work_id":"62f2b1ab-7f2a-4bd8-9dfa-c0efb08f9f3a","year":2018},"citing_paper":{"arxiv_id":"2501.01263","last_updated":"2025-01-02T13:58:05Z","snapshot_observed_at":"2026-08-19T11:52:39.634768Z","submitted_at":"2025-01-02T13:58:05Z","title":"Stealthy Backdoor Attack to Real-world Models in Android Apps","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-10T22:35:26.055502Z"},"links":{"citing_paper":"/paper/2501.01263"},"observation_digest":"sha256:74771b6beb13f75798bea6108dd65144c17dcf2d789c21b9c96e0857e3215a32","observation_id":"e70aa1f9-47c5-4aa7-a61f-5878b43fedba","resolution":{"observed_at":"2026-08-10T22:35:26.593461Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:35:26.060564Z","title":"Defending neural backdoors via genera- tive distribution modeling,","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2501.01263","last_updated":"2025-01-02T13:58:05Z","snapshot_observed_at":"2026-08-19T11:52:39.634768Z","submitted_at":"2025-01-02T13:58:05Z","title":"Stealthy Backdoor Attack to Real-world Models in Android Apps","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-10T22:35:26.060564Z"},"links":{"citing_paper":"/paper/2501.01263"},"observation_digest":"sha256:de5087fa25f4851ac74bf01d020814dd7ee2ca6a160e31dc7cd85c6ba1e246e9","observation_id":"fcb80719-b950-43d5-bc6e-0bab7d8b74a1","resolution":{"observed_at":"2026-08-10T22:35:26.060564Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:35:26.066312Z","title":"Neural cleanse: Identifying and mitigating backdoor attacks in neural networks,","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2501.01263","last_updated":"2025-01-02T13:58:05Z","snapshot_observed_at":"2026-08-19T11:52:39.634768Z","submitted_at":"2025-01-02T13:58:05Z","title":"Stealthy Backdoor Attack to Real-world Models in Android Apps","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-10T22:35:26.066312Z"},"links":{"citing_paper":"/paper/2501.01263"},"observation_digest":"sha256:96db3cba0b96cfbae4b87ccb216cc3b15f38eabe15db05d89868e78a40e43814","observation_id":"6c732795-b2d7-4304-8547-c85632d3b6a4","resolution":{"observed_at":"2026-08-10T22:35:26.066312Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:35:26.538358Z","title":"Sentinet: Detecting localized universal attacks against deep learning systems,","venue":null,"work_id":"cf01b623-9019-40c0-9582-460cf034d78c","year":2020},"citing_paper":{"arxiv_id":"2501.01263","last_updated":"2025-01-02T13:58:05Z","snapshot_observed_at":"2026-08-19T11:52:39.634768Z","submitted_at":"2025-01-02T13:58:05Z","title":"Stealthy Backdoor Attack to Real-world Models in Android Apps","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-10T22:35:26.072258Z"},"links":{"citing_paper":"/paper/2501.01263"},"observation_digest":"sha256:d0712dbbd18702af53c07755d1d4a5dcfa2146f564fea02a76372229385d6ac1","observation_id":"98bd42a0-63b5-44e4-90ab-f3031e311dec","resolution":{"observed_at":"2026-08-10T22:35:26.543955Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:35:26.518288Z","title":"Design and evaluation of a multi-domain trojan detection method on deep neural networks,","venue":null,"work_id":"49fdc049-8d62-432a-813d-0bfa43464750","year":2021},"citing_paper":{"arxiv_id":"2501.01263","last_updated":"2025-01-02T13:58:05Z","snapshot_observed_at":"2026-08-19T11:52:39.634768Z","submitted_at":"2025-01-02T13:58:05Z","title":"Stealthy Backdoor Attack to Real-world Models in Android Apps","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-10T22:35:26.077414Z"},"links":{"citing_paper":"/paper/2501.01263"},"observation_digest":"sha256:260dfb151610a95f4f43f1df60304053af519581e117ae04313fb686653bed1e","observation_id":"4203273f-9bf4-475b-baf5-6ee2c258568c","resolution":{"observed_at":"2026-08-10T22:35:26.524268Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:35:26.499421Z","title":"Invisible backdoor attack with attention and steganography,","venue":null,"work_id":"016da3d4-1c45-4bce-acba-590ce20ca450","year":2024},"citing_paper":{"arxiv_id":"2501.01263","last_updated":"2025-01-02T13:58:05Z","snapshot_observed_at":"2026-08-19T11:52:39.634768Z","submitted_at":"2025-01-02T13:58:05Z","title":"Stealthy Backdoor Attack to Real-world Models in Android Apps","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-10T22:35:26.082945Z"},"links":{"citing_paper":"/paper/2501.01263"},"observation_digest":"sha256:5f98e7bca3db9a9df3191918692c9d3223c2a21d71f01d5efbedb6624ee5c2c0","observation_id":"d133ea0b-358b-4272-b4c8-ef40932e8c53","resolution":{"observed_at":"2026-08-10T22:35:26.505099Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:35:26.480864Z","title":"U-net: Convolutional networks for biomedical image segmentation,","venue":null,"work_id":"3bff06ee-2c5f-491f-b0f0-04c1dbe3b7c1","year":2015},"citing_paper":{"arxiv_id":"2501.01263","last_updated":"2025-01-02T13:58:05Z","snapshot_observed_at":"2026-08-19T11:52:39.634768Z","submitted_at":"2025-01-02T13:58:05Z","title":"Stealthy Backdoor Attack to Real-world Models in Android Apps","version":1},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-10T22:35:26.092202Z"},"links":{"citing_paper":"/paper/2501.01263"},"observation_digest":"sha256:7347cbe478496922f75602ca5d771397b20200fd2ac86ff2da17fd93e80528e6","observation_id":"887c242a-a844-42ef-abdc-88f58029fd59","resolution":{"observed_at":"2026-08-10T22:35:26.487218Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:35:26.462439Z","title":"Spa- tial transformer networks,","venue":null,"work_id":"6d00a606-2c6d-489f-965f-6c72cb0fec33","year":2015},"citing_paper":{"arxiv_id":"2501.01263","last_updated":"2025-01-02T13:58:05Z","snapshot_observed_at":"2026-08-19T11:52:39.634768Z","submitted_at":"2025-01-02T13:58:05Z","title":"Stealthy Backdoor Attack to Real-world Models in Android Apps","version":1},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-10T22:35:26.100079Z"},"links":{"citing_paper":"/paper/2501.01263"},"observation_digest":"sha256:f95e84cc309e097333e8cd5884c1123e4cfcb5367dd40ad64accf81fd4c85d3c","observation_id":"c014d7e2-eec6-47da-af34-ad24feffe2a4","resolution":{"observed_at":"2026-08-10T22:35:26.467732Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:35:26.105981Z","title":"Mobilenetv2: Inverted residuals and linear bottlenecks,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2501.01263","last_updated":"2025-01-02T13:58:05Z","snapshot_observed_at":"2026-08-19T11:52:39.634768Z","submitted_at":"2025-01-02T13:58:05Z","title":"Stealthy Backdoor Attack to Real-world Models in Android Apps","version":1},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-10T22:35:26.105981Z"},"links":{"citing_paper":"/paper/2501.01263"},"observation_digest":"sha256:b5faec2d9dd598b2d9213f63c36209939809b08cfe6adab5f802fdd0a7a5a26a","observation_id":"49aa9ba8-62f1-4315-8f74-78ad5b2dcd62","resolution":{"observed_at":"2026-08-10T22:35:26.105981Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:35:26.423708Z","title":"Learning transferable architectures for scalable image recognition,","venue":null,"work_id":"ae1c3848-18bd-4fc7-aa02-778c9151b56d","year":2018},"citing_paper":{"arxiv_id":"2501.01263","last_updated":"2025-01-02T13:58:05Z","snapshot_observed_at":"2026-08-19T11:52:39.634768Z","submitted_at":"2025-01-02T13:58:05Z","title":"Stealthy Backdoor Attack to Real-world Models in Android Apps","version":1},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-10T22:35:26.111328Z"},"links":{"citing_paper":"/paper/2501.01263"},"observation_digest":"sha256:f6222f4da606af6d477b28e06afb1d370a0623f85c6f48f3337fbf5831e65e3b","observation_id":"7a4e90ef-5726-47ed-b88e-52274a91b336","resolution":{"observed_at":"2026-08-10T22:35:26.429995Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:35:26.117343Z","title":"Deep residual learning for image recognition,","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2501.01263","last_updated":"2025-01-02T13:58:05Z","snapshot_observed_at":"2026-08-19T11:52:39.634768Z","submitted_at":"2025-01-02T13:58:05Z","title":"Stealthy Backdoor Attack to Real-world Models in Android Apps","version":1},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-10T22:35:26.117343Z"},"links":{"citing_paper":"/paper/2501.01263"},"observation_digest":"sha256:9de7e2b80a8cc4be180a3a37b652ab9a91a6289ee591d8a3e8e3d15221555721","observation_id":"57f8ea9c-455d-477a-82b1-2aa0864b6046","resolution":{"observed_at":"2026-08-10T22:35:26.117343Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1409.1556","last_updated":"2015-04-10T16:25:04Z","snapshot_observed_at":"2026-08-17T19:17:06.411141Z","submitted_at":"2014-09-04T19:48:04Z","title":"Very Deep Convolutional Networks for Large-Scale Image Recognition","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1409.1556","snapshot_observed_at":"2026-08-10T22:35:26.124725Z","title":"Very deep convolutional networks for large-scale image recognition,","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2501.01263","last_updated":"2025-01-02T13:58:05Z","snapshot_observed_at":"2026-08-19T11:52:39.634768Z","submitted_at":"2025-01-02T13:58:05Z","title":"Stealthy Backdoor Attack to Real-world Models in Android Apps","version":1},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-08-10T22:35:26.124725Z"},"links":{"cited_paper":"/paper/1409.1556","citing_paper":"/paper/2501.01263"},"observation_digest":"sha256:a860467638498c36a428d965fa39ababa007d8e5f051788eed57a87ef99dd29b","observation_id":"34eaa056-e6b5-45fb-8e1b-a4ca4e0b0317","resolution":{"observed_at":"2026-08-10T22:35:26.124725Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:35:26.378327Z","title":"Multiscale structural similarity for image quality assessment,","venue":null,"work_id":"22868d8d-3ea2-4521-8053-9887b6b09397","year":2003},"citing_paper":{"arxiv_id":"2501.01263","last_updated":"2025-01-02T13:58:05Z","snapshot_observed_at":"2026-08-19T11:52:39.634768Z","submitted_at":"2025-01-02T13:58:05Z","title":"Stealthy Backdoor Attack to Real-world Models in Android Apps","version":1},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-08-10T22:35:26.132746Z"},"links":{"citing_paper":"/paper/2501.01263"},"observation_digest":"sha256:dcb64b72cbe2a1c6212ff18ba69376eeecab29c1087f714f38921e607e9fcc8e","observation_id":"1ff79a83-a940-4654-a1a1-940a1288ccec","resolution":{"observed_at":"2026-08-10T22:35:26.389142Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:35:26.709101Z","title":null,"venue":null,"work_id":"8b17e127-5ec1-4cf4-a63f-9c278ea7d24d","year":2017},"citing_paper":{"arxiv_id":"2501.01263","last_updated":"2025-01-02T13:58:05Z","snapshot_observed_at":"2026-08-19T11:52:39.634768Z","submitted_at":"2025-01-02T13:58:05Z","title":"Stealthy Backdoor Attack to Real-world Models in Android Apps","version":1},"reference_index":2017,"source":"pdf_text","source_observed_at":"2026-08-10T22:35:26.018138Z"},"links":{"citing_paper":"/paper/2501.01263"},"observation_digest":"sha256:c8b080c6d2123a8f952da53df042b3958169c3b5c71ee997e9585aacb9cf3d1f","observation_id":"c1282487-bc02-4bfe-bf2a-b9847a8289ae","resolution":{"observed_at":"2026-08-10T22:35:26.714737Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T22:35:27.217609Z","title":null,"venue":null,"work_id":"dd3453c2-5059-43ad-8e2b-346b0e564158","year":2021},"citing_paper":{"arxiv_id":"2501.01263","last_updated":"2025-01-02T13:58:05Z","snapshot_observed_at":"2026-08-19T11:52:39.634768Z","submitted_at":"2025-01-02T13:58:05Z","title":"Stealthy Backdoor Attack to Real-world Models in Android Apps","version":1},"reference_index":2021,"source":"pdf_text","source_observed_at":"2026-08-10T22:35:25.816519Z"},"links":{"citing_paper":"/paper/2501.01263"},"observation_digest":"sha256:06baee21f1f58b4b8431b4799575c6ab715f46fcc38fba2ccd7fad01e1e70ea5","observation_id":"a991a98e-e2a9-4665-ba61-a944962f8570","resolution":{"observed_at":"2026-08-10T22:35:27.223706Z","resolver_source":"raw_fallback","status":"parse_uncertain"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2501.01263","last_updated":"2025-01-02T13:58:05Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-19T11:52:39.634768Z","submitted_at":"2025-01-02T13:58:05Z","title":"Stealthy Backdoor Attack to Real-world Models in Android Apps"},"reference_resolution":{"displayed":58,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":1,"unresolved":20,"verified_exact":0,"verified_fuzzy":37},"total_outbound_references":58},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"thesis":"As of 19 August 2026, this Paper Citation Record lists 58 of 58 outbound references and 1 inbound Pith citation observation for arXiv:2501.01263."}