{"as_of":"2026-08-11T11:10:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:09396a8e6a2af9528841dbec06ec8a51bb300e565d84c097285b6d10c8666cdd","coverage":[{"denominator":65,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":65,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-10T17:34:41.963520Z","state":"measured"},{"denominator":65,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":65,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-11T06:34:44.6726+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2501.12123/citation-record","integrity":"/paper/2501.12123/integrity","json":"/paper/2501.12123/citation-record.json","paper":"/paper/2501.12123"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T17:34:42.906151Z","title":"Federated learning for diabetic retinopathy detection 14 FL-CLEANER: byzantine and backdoor defense in Non-iid federated learning in a multi-center fundus screening network","venue":null,"work_id":"48909d32-a4b4-4dd6-9e12-b2d7ab13eb84","year":2023},"citing_paper":{"arxiv_id":"2501.12123","last_updated":"2025-09-01T15:07:28Z","snapshot_observed_at":"2026-08-10T17:27:00.409071Z","submitted_at":"2025-01-21T13:37:28Z","title":"FL-CLEANER: byzantine and backdoor defense by CLustering Errors of Activation maps in Non-iid fedErated leaRning","version":2},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-10T17:34:41.658583Z"},"links":{"citing_paper":"/paper/2501.12123"},"observation_digest":"sha256:fc5371cfcc0e1f9b28a7fce575292defafcf00471e2a775f5880acfab1beec0f","observation_id":"a1af5e70-5ced-4c17-8a49-c6d6404d03c4","resolution":{"observed_at":"2026-08-10T17:34:42.911856Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T17:34:42.890056Z","title":"Emerging trends in federated learning: From model fusion to federated x learning","venue":null,"work_id":"51b48a7c-6e46-44bf-bbbb-bf12d467cbb0","year":2024},"citing_paper":{"arxiv_id":"2501.12123","last_updated":"2025-09-01T15:07:28Z","snapshot_observed_at":"2026-08-10T17:27:00.409071Z","submitted_at":"2025-01-21T13:37:28Z","title":"FL-CLEANER: byzantine and backdoor defense by CLustering Errors of Activation maps in Non-iid fedErated leaRning","version":2},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-10T17:34:41.663894Z"},"links":{"citing_paper":"/paper/2501.12123"},"observation_digest":"sha256:ecd2395f7426ea21a005886233b047b1cf887bcc5fd4fd59e9c3e42f1777549a","observation_id":"d74b1494-a12e-41f5-9f3d-ba538b3aa7ef","resolution":{"observed_at":"2026-08-10T17:34:42.895057Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T17:34:42.875379Z","title":"Federated learning for medical image analysis: A survey","venue":null,"work_id":"1d208ff9-3ce7-4301-b458-1fe233acc877","year":2024},"citing_paper":{"arxiv_id":"2501.12123","last_updated":"2025-09-01T15:07:28Z","snapshot_observed_at":"2026-08-10T17:27:00.409071Z","submitted_at":"2025-01-21T13:37:28Z","title":"FL-CLEANER: byzantine and backdoor defense by CLustering Errors of Activation maps in Non-iid fedErated leaRning","version":2},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-10T17:34:41.668692Z"},"links":{"citing_paper":"/paper/2501.12123"},"observation_digest":"sha256:29cf2ce9da3d890a01bfa0ef0327232c81588838d3278019ab9a5bfacaf8ad61","observation_id":"6bcfd712-662d-4ec2-ae85-05cd4b04975f","resolution":{"observed_at":"2026-08-10T17:34:42.879956Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T17:34:42.860739Z","title":"When federated learning meets watermarking: A comprehensive overview of techniques for intellectual property protection","venue":null,"work_id":"2659f14b-4950-4d3e-875c-bc97b3e2d385","year":2023},"citing_paper":{"arxiv_id":"2501.12123","last_updated":"2025-09-01T15:07:28Z","snapshot_observed_at":"2026-08-10T17:27:00.409071Z","submitted_at":"2025-01-21T13:37:28Z","title":"FL-CLEANER: byzantine and backdoor defense by CLustering Errors of Activation maps in Non-iid fedErated leaRning","version":2},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-10T17:34:41.673519Z"},"links":{"citing_paper":"/paper/2501.12123"},"observation_digest":"sha256:02a7c91d5da399b7e194c621d754c5540581e1d1f7ef007f3eba4d485e00807b","observation_id":"e88b9741-2207-4514-a8c8-6feb71ca8c00","resolution":{"observed_at":"2026-08-10T17:34:42.865723Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T17:34:42.846507Z","title":"Federated learning for mobile keyboard prediction, 2018","venue":null,"work_id":"a867ecf8-b0c2-4491-90ac-b445a18683b3","year":2018},"citing_paper":{"arxiv_id":"2501.12123","last_updated":"2025-09-01T15:07:28Z","snapshot_observed_at":"2026-08-10T17:27:00.409071Z","submitted_at":"2025-01-21T13:37:28Z","title":"FL-CLEANER: byzantine and backdoor defense by CLustering Errors of Activation maps in Non-iid fedErated leaRning","version":2},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-10T17:34:41.678040Z"},"links":{"citing_paper":"/paper/2501.12123"},"observation_digest":"sha256:84e1b3c9e097d6fd45bb8cb921a0ad022e29e3d3f998077b248e6d5d95a2723b","observation_id":"9b540afb-e2c1-4fe5-b6fd-7d775b935b83","resolution":{"observed_at":"2026-08-10T17:34:42.851031Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1602.05629","last_updated":"2023-01-26T22:54:08Z","snapshot_observed_at":"2026-08-01T18:04:48.083997Z","submitted_at":"2016-02-17T23:40:56Z","title":"Communication-Efficient Learning of Deep Networks from Decentralized Data","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1602.05629","snapshot_observed_at":"2026-08-10T17:34:41.682543Z","title":"Federated learning of deep networks using model averaging","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2501.12123","last_updated":"2025-09-01T15:07:28Z","snapshot_observed_at":"2026-08-10T17:27:00.409071Z","submitted_at":"2025-01-21T13:37:28Z","title":"FL-CLEANER: byzantine and backdoor defense by CLustering Errors of Activation maps in Non-iid fedErated leaRning","version":2},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-10T17:34:41.682543Z"},"links":{"cited_paper":"/paper/1602.05629","citing_paper":"/paper/2501.12123"},"observation_digest":"sha256:f7cc7a1a5937dbc70c435419caa2b6d2b6fb6ae37e0f36ac91c0e3c93671ceea","observation_id":"b754c0cb-65f2-43cd-9116-3910068ec7a9","resolution":{"observed_at":"2026-08-10T17:34:41.682543Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T17:34:42.831693Z","title":"Poisoning attacks in federated learning: A survey","venue":null,"work_id":"02c65b76-b028-4356-8a26-a3b7baef284f","year":2023},"citing_paper":{"arxiv_id":"2501.12123","last_updated":"2025-09-01T15:07:28Z","snapshot_observed_at":"2026-08-10T17:27:00.409071Z","submitted_at":"2025-01-21T13:37:28Z","title":"FL-CLEANER: byzantine and backdoor defense by CLustering Errors of Activation maps in Non-iid fedErated leaRning","version":2},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-10T17:34:41.689534Z"},"links":{"citing_paper":"/paper/2501.12123"},"observation_digest":"sha256:fafb2b07200a5a3aab31924f3cff6b893327de2b319eb712543772fc931b7c4c","observation_id":"92f634fc-951c-423b-903c-c5952586c5d6","resolution":{"observed_at":"2026-08-10T17:34:42.836483Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T17:34:41.694326Z","title":"Communication- efficient learning of deep networks from decentralized data","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2501.12123","last_updated":"2025-09-01T15:07:28Z","snapshot_observed_at":"2026-08-10T17:27:00.409071Z","submitted_at":"2025-01-21T13:37:28Z","title":"FL-CLEANER: byzantine and backdoor defense by CLustering Errors of Activation maps in Non-iid fedErated leaRning","version":2},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-10T17:34:41.694326Z"},"links":{"citing_paper":"/paper/2501.12123"},"observation_digest":"sha256:59606d86b608c73683de2e2097ad5790d92584ccacd19d7259ca39fbec28c69f","observation_id":"07eacb2b-f710-40c1-8393-8866aa0ff705","resolution":{"observed_at":"2026-08-10T17:34:41.694326Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1703.02757","last_updated":"2017-03-08T09:26:36Z","snapshot_observed_at":"2026-08-01T14:34:53.455114Z","submitted_at":"2017-03-08T09:26:36Z","title":"Byzantine-Tolerant Machine Learning","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1703.02757","snapshot_observed_at":"2026-08-10T17:34:41.699167Z","title":"Byzantine-tolerant machine learning","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2501.12123","last_updated":"2025-09-01T15:07:28Z","snapshot_observed_at":"2026-08-10T17:27:00.409071Z","submitted_at":"2025-01-21T13:37:28Z","title":"FL-CLEANER: byzantine and backdoor defense by CLustering Errors of Activation maps in Non-iid fedErated leaRning","version":2},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-10T17:34:41.699167Z"},"links":{"cited_paper":"/paper/1703.02757","citing_paper":"/paper/2501.12123"},"observation_digest":"sha256:d27fb72b1dc7eab8358d724034ecb411181a679489feaf72aeaa34cee5e195de","observation_id":"2114657d-42a8-46e5-ba1b-0a8582d910bf","resolution":{"observed_at":"2026-08-10T17:34:41.699167Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T17:34:42.806281Z","title":"The hidden vulnerability of distributed learning in byzantium","venue":null,"work_id":"eb8581e1-76a1-4ffb-8947-0b85cf4b174e","year":2018},"citing_paper":{"arxiv_id":"2501.12123","last_updated":"2025-09-01T15:07:28Z","snapshot_observed_at":"2026-08-10T17:27:00.409071Z","submitted_at":"2025-01-21T13:37:28Z","title":"FL-CLEANER: byzantine and backdoor defense by CLustering Errors of Activation maps in Non-iid fedErated leaRning","version":2},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-10T17:34:41.704480Z"},"links":{"citing_paper":"/paper/2501.12123"},"observation_digest":"sha256:3a8f0fcfbf15b228e934c1337b7cc68232353195feee932b0c5b277b8dfd9df6","observation_id":"6e037274-0fbe-49c1-a892-238a298c5041","resolution":{"observed_at":"2026-08-10T17:34:42.811895Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T17:34:42.790109Z","title":"Federated learning attacks and defenses: A survey, 2022","venue":null,"work_id":"9f73fe7b-1acd-4f66-8872-e59683a96e76","year":2022},"citing_paper":{"arxiv_id":"2501.12123","last_updated":"2025-09-01T15:07:28Z","snapshot_observed_at":"2026-08-10T17:27:00.409071Z","submitted_at":"2025-01-21T13:37:28Z","title":"FL-CLEANER: byzantine and backdoor defense by CLustering Errors of Activation maps in Non-iid fedErated leaRning","version":2},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-10T17:34:41.709726Z"},"links":{"citing_paper":"/paper/2501.12123"},"observation_digest":"sha256:4ce5034b6298e3e195a2f9f3d8bbf81bb86266770fe8d9ab20ad99e015b1db26","observation_id":"bad1819b-7088-44e7-8f4d-d48d99bce0de","resolution":{"observed_at":"2026-08-10T17:34:42.795058Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T17:34:42.775387Z","title":"Detecting malicious model updates from federated learning on conditional variational autoencoder","venue":null,"work_id":"bb1f35c4-0b93-412d-8431-64b9678883cc","year":2021},"citing_paper":{"arxiv_id":"2501.12123","last_updated":"2025-09-01T15:07:28Z","snapshot_observed_at":"2026-08-10T17:27:00.409071Z","submitted_at":"2025-01-21T13:37:28Z","title":"FL-CLEANER: byzantine and backdoor defense by CLustering Errors of Activation maps in Non-iid fedErated leaRning","version":2},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-10T17:34:41.714920Z"},"links":{"citing_paper":"/paper/2501.12123"},"observation_digest":"sha256:f701f98227f25b9c8f32b716ca79ad505cc23f8d3f6eb840c9c73d2090a4af17","observation_id":"040ac5d7-bb2e-4247-b0b7-6e55b2f05c5f","resolution":{"observed_at":"2026-08-10T17:34:42.780055Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T17:34:42.760390Z","title":"Fedguard: Selective parameter aggregation for poisoning attack mitigation in federated learning","venue":null,"work_id":"d7f69a33-bc5c-4cdd-b40a-8d33e6100247","year":2023},"citing_paper":{"arxiv_id":"2501.12123","last_updated":"2025-09-01T15:07:28Z","snapshot_observed_at":"2026-08-10T17:27:00.409071Z","submitted_at":"2025-01-21T13:37:28Z","title":"FL-CLEANER: byzantine and backdoor defense by CLustering Errors of Activation maps in Non-iid fedErated leaRning","version":2},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-10T17:34:41.719963Z"},"links":{"citing_paper":"/paper/2501.12123"},"observation_digest":"sha256:8eaef36410d696aae1b8ba29ca24805a80923f502c522d21e2459e670396c212","observation_id":"8d53d37f-9047-473d-a5b9-345952e2ae1c","resolution":{"observed_at":"2026-08-10T17:34:42.765370Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2310.02113","last_updated":"2023-10-03T14:55:30Z","snapshot_observed_at":"2026-08-06T06:24:15.663493Z","submitted_at":"2023-10-03T14:55:30Z","title":"FLEDGE: Ledger-based Federated Learning Resilient to Inference and Backdoor Attacks","version":1},"cited_work":{"arxiv_id":"2310.02113","doi":null,"metadata_source":"pith","pith_arxiv_id":"2310.02113","snapshot_observed_at":"2026-08-10T17:34:42.159770Z","title":"FLEDGE: Ledger-based Federated Learning Resilient to Inference and Backdoor Attacks","venue":"cs.CR","work_id":"ffdf649c-2037-4c7a-bca5-0d68d9f5839e","year":2023},"citing_paper":{"arxiv_id":"2501.12123","last_updated":"2025-09-01T15:07:28Z","snapshot_observed_at":"2026-08-10T17:27:00.409071Z","submitted_at":"2025-01-21T13:37:28Z","title":"FL-CLEANER: byzantine and backdoor defense by CLustering Errors of Activation maps in Non-iid fedErated leaRning","version":2},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-10T17:34:41.724989Z"},"links":{"cited_paper":"/paper/2310.02113","citing_paper":"/paper/2501.12123"},"observation_digest":"sha256:91693b31aa0da0d3bb9f81f73b2351066b597104ed123e58c0a329a5d8a1a4c5","observation_id":"6aafa34a-3d3a-43f1-9988-82a8d4423e10","resolution":{"observed_at":"2026-08-10T17:34:42.165043Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2201.00763","last_updated":"2022-01-03T17:10:07Z","snapshot_observed_at":"2026-08-11T02:53:56.454672Z","submitted_at":"2022-01-03T17:10:07Z","title":"DeepSight: Mitigating Backdoor Attacks in Federated Learning Through Deep Model Inspection","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2201.00763","snapshot_observed_at":"2026-08-10T17:34:41.730788Z","title":"DeepSight: Mitigating Backdoor Attacks in Federated Learning Through Deep Model Inspection","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2501.12123","last_updated":"2025-09-01T15:07:28Z","snapshot_observed_at":"2026-08-10T17:27:00.409071Z","submitted_at":"2025-01-21T13:37:28Z","title":"FL-CLEANER: byzantine and backdoor defense by CLustering Errors of Activation maps in Non-iid fedErated leaRning","version":2},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-10T17:34:41.730788Z"},"links":{"cited_paper":"/paper/2201.00763","citing_paper":"/paper/2501.12123"},"observation_digest":"sha256:ef9c1f84e6868cc9d375f7b4f9f4b76b97eb7413e3950be5a4f1b4a862b2df4c","observation_id":"07b22234-bf88-4cb2-9f01-6fbf1648fe42","resolution":{"observed_at":"2026-08-10T17:34:41.730788Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T17:34:42.745495Z","title":"FedCAM - Identifying Malicious Models in Federated Learning Environments Conditionally to Their Activation Maps","venue":null,"work_id":"e014a9c4-e46b-4a1e-8cca-b3a0fff46dba","year":2024},"citing_paper":{"arxiv_id":"2501.12123","last_updated":"2025-09-01T15:07:28Z","snapshot_observed_at":"2026-08-10T17:27:00.409071Z","submitted_at":"2025-01-21T13:37:28Z","title":"FL-CLEANER: byzantine and backdoor defense by CLustering Errors of Activation maps in Non-iid fedErated leaRning","version":2},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-10T17:34:41.736488Z"},"links":{"citing_paper":"/paper/2501.12123"},"observation_digest":"sha256:ba923213b57d61e7fd210cf770ce0ffbea66cd2ba088d0db5f6c724d2386bd90","observation_id":"92cdbb6c-fb2f-4c22-b5a4-48e0de7439ee","resolution":{"observed_at":"2026-08-10T17:34:42.750473Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2309.13591","last_updated":"2023-10-28T09:32:53Z","snapshot_observed_at":"2026-07-06T16:22:54.872252Z","submitted_at":"2023-09-24T09:29:28Z","title":"Robust Distributed Learning: Tight Error Bounds and Breakdown Point under Data Heterogeneity","version":2},"cited_work":{"arxiv_id":"2309.13591","doi":null,"metadata_source":"pith","pith_arxiv_id":"2309.13591","snapshot_observed_at":"2026-08-10T17:34:42.124092Z","title":"Robust Distributed Learning: Tight Error Bounds and Breakdown Point under Data Heterogeneity","venue":"cs.LG","work_id":"3492cf42-6cda-4c7c-b5c4-9734e0d28345","year":2023},"citing_paper":{"arxiv_id":"2501.12123","last_updated":"2025-09-01T15:07:28Z","snapshot_observed_at":"2026-08-10T17:27:00.409071Z","submitted_at":"2025-01-21T13:37:28Z","title":"FL-CLEANER: byzantine and backdoor defense by CLustering Errors of Activation maps in Non-iid fedErated leaRning","version":2},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-10T17:34:41.741682Z"},"links":{"cited_paper":"/paper/2309.13591","citing_paper":"/paper/2501.12123"},"observation_digest":"sha256:5f284be2605e4aeaa75b5eda18be4c4567e7d9534edead2f0f8ab5078c4d5196","observation_id":"45ee7c0a-ecfb-49fc-b5fa-a49273949800","resolution":{"observed_at":"2026-08-10T17:34:42.128964Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T17:34:42.730604Z","title":"Network- level adversaries in federated learning, 2022","venue":null,"work_id":"b66dedf2-5f64-4dc6-a81d-57f83dcefeba","year":2022},"citing_paper":{"arxiv_id":"2501.12123","last_updated":"2025-09-01T15:07:28Z","snapshot_observed_at":"2026-08-10T17:27:00.409071Z","submitted_at":"2025-01-21T13:37:28Z","title":"FL-CLEANER: byzantine and backdoor defense by CLustering Errors of Activation maps in Non-iid fedErated leaRning","version":2},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-10T17:34:41.747445Z"},"links":{"citing_paper":"/paper/2501.12123"},"observation_digest":"sha256:25a79fb9216d08d2c86ea35f69f76f67524fdff45ebb59a9a945acc7ae085b7f","observation_id":"cfc39f9f-7608-4842-b060-fca6af12430c","resolution":{"observed_at":"2026-08-10T17:34:42.735551Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T17:34:41.751975Z","title":"Federated optimization in heterogeneous networks","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2501.12123","last_updated":"2025-09-01T15:07:28Z","snapshot_observed_at":"2026-08-10T17:27:00.409071Z","submitted_at":"2025-01-21T13:37:28Z","title":"FL-CLEANER: byzantine and backdoor defense by CLustering Errors of Activation maps in Non-iid fedErated leaRning","version":2},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-10T17:34:41.751975Z"},"links":{"citing_paper":"/paper/2501.12123"},"observation_digest":"sha256:90431a194e2ca627929cacf8233c1b461178cfadcf15b4f8b5ff5ebfe9fb7b96","observation_id":"6b111927-7ddb-462c-aa51-09368a92f907","resolution":{"observed_at":"2026-08-10T17:34:41.751975Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T17:34:41.757411Z","title":"Scaffold: Stochastic controlled averaging for federated learning","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2501.12123","last_updated":"2025-09-01T15:07:28Z","snapshot_observed_at":"2026-08-10T17:27:00.409071Z","submitted_at":"2025-01-21T13:37:28Z","title":"FL-CLEANER: byzantine and backdoor defense by CLustering Errors of Activation maps in Non-iid fedErated leaRning","version":2},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-10T17:34:41.757411Z"},"links":{"citing_paper":"/paper/2501.12123"},"observation_digest":"sha256:3d0d7ebf44e2b8b56715bb5fdcdec1bc7a06403ca5c0f8e9ee3f26a01f4001f5","observation_id":"f368baf0-d588-4536-8ca6-128dd5004ad5","resolution":{"observed_at":"2026-08-10T17:34:41.757411Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2111.04263","last_updated":"2021-11-09T16:37:10Z","snapshot_observed_at":"2026-08-06T07:03:02.521207Z","submitted_at":"2021-11-08T03:58:28Z","title":"Federated Learning Based on Dynamic Regularization","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2111.04263","snapshot_observed_at":"2026-08-10T17:34:41.761936Z","title":"Federated learning based on dynamic regularization","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2501.12123","last_updated":"2025-09-01T15:07:28Z","snapshot_observed_at":"2026-08-10T17:27:00.409071Z","submitted_at":"2025-01-21T13:37:28Z","title":"FL-CLEANER: byzantine and backdoor defense by CLustering Errors of Activation maps in Non-iid fedErated leaRning","version":2},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-10T17:34:41.761936Z"},"links":{"cited_paper":"/paper/2111.04263","citing_paper":"/paper/2501.12123"},"observation_digest":"sha256:dccd3646631b40e5f99b56c5b7211fe60289ba2dbc37a653a9f7be142ad5e345","observation_id":"8651b59d-4afd-4872-abe0-3c794c14d953","resolution":{"observed_at":"2026-08-10T17:34:41.761936Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T17:34:42.696414Z","title":"Feddc: Federated learning with non-iid data via local drift decoupling and correction","venue":null,"work_id":"80122d9a-e099-4712-a8cb-afc7ba4015ed","year":2022},"citing_paper":{"arxiv_id":"2501.12123","last_updated":"2025-09-01T15:07:28Z","snapshot_observed_at":"2026-08-10T17:27:00.409071Z","submitted_at":"2025-01-21T13:37:28Z","title":"FL-CLEANER: byzantine and backdoor defense by CLustering Errors of Activation maps in Non-iid fedErated leaRning","version":2},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-10T17:34:41.766776Z"},"links":{"citing_paper":"/paper/2501.12123"},"observation_digest":"sha256:73d0cdfa094cca58dd77c25136af260e2d4c6f51fe263abf9f673352a10de58e","observation_id":"3f26f694-1686-4788-97f2-4ee7e56ea392","resolution":{"observed_at":"2026-08-10T17:34:42.701630Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2002.00211","last_updated":"2020-02-01T14:09:48Z","snapshot_observed_at":"2026-08-07T00:07:33.465634Z","submitted_at":"2020-02-01T14:09:48Z","title":"Learning to Detect Malicious Clients for Robust Federated Learning","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2002.00211","snapshot_observed_at":"2026-08-10T17:34:41.771190Z","title":"Learning to detect malicious clients for robust federated learning","venue":null,"work_id":null,"year":2002},"citing_paper":{"arxiv_id":"2501.12123","last_updated":"2025-09-01T15:07:28Z","snapshot_observed_at":"2026-08-10T17:27:00.409071Z","submitted_at":"2025-01-21T13:37:28Z","title":"FL-CLEANER: byzantine and backdoor defense by CLustering Errors of Activation maps in Non-iid fedErated leaRning","version":2},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-10T17:34:41.771190Z"},"links":{"cited_paper":"/paper/2002.00211","citing_paper":"/paper/2501.12123"},"observation_digest":"sha256:bf07438dff0cf2afab211da661620f4a184eb19a92985d818106bc216c770f7f","observation_id":"9af8c66f-9d6a-43fa-a9dc-69ac640f999c","resolution":{"observed_at":"2026-08-10T17:34:41.771190Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1610.05820","last_updated":"2017-03-31T22:17:07Z","snapshot_observed_at":"2026-07-06T05:15:08.120372Z","submitted_at":"2016-10-18T22:38:33Z","title":"Membership Inference Attacks against Machine Learning Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1610.05820","snapshot_observed_at":"2026-08-10T17:34:41.775530Z","title":"Membership inference attacks against machine learning models","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2501.12123","last_updated":"2025-09-01T15:07:28Z","snapshot_observed_at":"2026-08-10T17:27:00.409071Z","submitted_at":"2025-01-21T13:37:28Z","title":"FL-CLEANER: byzantine and backdoor defense by CLustering Errors of Activation maps in Non-iid fedErated leaRning","version":2},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-10T17:34:41.775530Z"},"links":{"cited_paper":"/paper/1610.05820","citing_paper":"/paper/2501.12123"},"observation_digest":"sha256:365b50baccd275a59a56e0bbd6b31591c9b57f16a96726bcae48a658a6b97cbf","observation_id":"333f4d21-b0ec-4e54-8a74-75d825f8c2b4","resolution":{"observed_at":"2026-08-10T17:34:41.775530Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T17:34:42.681458Z","title":"Detection of malicious clients in federated learning using graph neural network","venue":null,"work_id":"456972f6-117b-462c-9946-d977e2de038a","year":2025},"citing_paper":{"arxiv_id":"2501.12123","last_updated":"2025-09-01T15:07:28Z","snapshot_observed_at":"2026-08-10T17:27:00.409071Z","submitted_at":"2025-01-21T13:37:28Z","title":"FL-CLEANER: byzantine and backdoor defense by CLustering Errors of Activation maps in Non-iid fedErated leaRning","version":2},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-10T17:34:41.780137Z"},"links":{"citing_paper":"/paper/2501.12123"},"observation_digest":"sha256:073831587c7d9d4453f8688e008d0df938f808e3877a46b6f263ff6c4511e2f9","observation_id":"62ca0a27-a229-4bf4-add1-d3446c4b61b9","resolution":{"observed_at":"2026-08-10T17:34:42.686115Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T17:34:42.666488Z","title":"Pham, Khoa D","venue":null,"work_id":"47f6b829-64e6-49fa-bcc8-b53a70cfb32c","year":2024},"citing_paper":{"arxiv_id":"2501.12123","last_updated":"2025-09-01T15:07:28Z","snapshot_observed_at":"2026-08-10T17:27:00.409071Z","submitted_at":"2025-01-21T13:37:28Z","title":"FL-CLEANER: byzantine and backdoor defense by CLustering Errors of Activation maps in Non-iid fedErated leaRning","version":2},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-10T17:34:41.784426Z"},"links":{"citing_paper":"/paper/2501.12123"},"observation_digest":"sha256:ec71ec342bb4f90c3acaf1de592fc4131854cce01c01d60260dc17446247644c","observation_id":"1bda1174-ae15-44dd-9ef0-81953cef8da2","resolution":{"observed_at":"2026-08-10T17:34:42.671346Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T17:34:42.651178Z","title":null,"venue":null,"work_id":"fbdf8ca5-e544-4b75-bf5c-c553f91b5e9c","year":2020},"citing_paper":{"arxiv_id":"2501.12123","last_updated":"2025-09-01T15:07:28Z","snapshot_observed_at":"2026-08-10T17:27:00.409071Z","submitted_at":"2025-01-21T13:37:28Z","title":"FL-CLEANER: byzantine and backdoor defense by CLustering Errors of Activation maps in Non-iid fedErated leaRning","version":2},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-10T17:34:41.788723Z"},"links":{"citing_paper":"/paper/2501.12123"},"observation_digest":"sha256:ccbe570f01690905ccff2d4756e180890396deab731f8ab424c44b76b6e28c5a","observation_id":"67e9075b-5765-4a6a-ab95-39e5d31fb37b","resolution":{"observed_at":"2026-08-10T17:34:42.655731Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T17:34:42.636814Z","title":"FLAME: Taming backdoors in federated learning","venue":null,"work_id":"6212cd65-68ae-47b2-bfdf-208c1f9a3b3d","year":2022},"citing_paper":{"arxiv_id":"2501.12123","last_updated":"2025-09-01T15:07:28Z","snapshot_observed_at":"2026-08-10T17:27:00.409071Z","submitted_at":"2025-01-21T13:37:28Z","title":"FL-CLEANER: byzantine and backdoor defense by CLustering Errors of Activation maps in Non-iid fedErated leaRning","version":2},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-10T17:34:41.793343Z"},"links":{"citing_paper":"/paper/2501.12123"},"observation_digest":"sha256:beac44dc7cd9be6e763d5e8a618a159ccb77adc441ea3927c10eaa5f651adaff","observation_id":"63cd744d-6e39-48dc-afdd-06d854bd4327","resolution":{"observed_at":"2026-08-10T17:34:42.641534Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T17:34:42.621906Z","title":"Fldetector: Defending federated learning against model poisoning attacks via detecting malicious clients, 2022","venue":null,"work_id":"c592c0c2-45ea-4a45-9c9f-450268fee4d4","year":2022},"citing_paper":{"arxiv_id":"2501.12123","last_updated":"2025-09-01T15:07:28Z","snapshot_observed_at":"2026-08-10T17:27:00.409071Z","submitted_at":"2025-01-21T13:37:28Z","title":"FL-CLEANER: byzantine and backdoor defense by CLustering Errors of Activation maps in Non-iid fedErated leaRning","version":2},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-10T17:34:41.798078Z"},"links":{"citing_paper":"/paper/2501.12123"},"observation_digest":"sha256:cb0a3d3ceda2af589c14b541e4368121a4062b1d318191efad9e61feca020b7d","observation_id":"a9ae9f1b-9b04-436e-981e-2b27858701cc","resolution":{"observed_at":"2026-08-10T17:34:42.627229Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T17:34:42.607192Z","title":"Mitigating backdoor attacks in federated learning, 2021","venue":null,"work_id":"33cc89a1-ba7f-47b4-b1c0-3434dc18da87","year":2021},"citing_paper":{"arxiv_id":"2501.12123","last_updated":"2025-09-01T15:07:28Z","snapshot_observed_at":"2026-08-10T17:27:00.409071Z","submitted_at":"2025-01-21T13:37:28Z","title":"FL-CLEANER: byzantine and backdoor defense by CLustering Errors of Activation maps in Non-iid fedErated leaRning","version":2},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-10T17:34:41.802738Z"},"links":{"citing_paper":"/paper/2501.12123"},"observation_digest":"sha256:a5e4d48da6306a4c58dcf79310152669a1ca27e12943e69c3c066ecd910cd7a3","observation_id":"f672fd68-851b-4576-9c8e-148bcc6bddec","resolution":{"observed_at":"2026-08-10T17:34:42.611972Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T17:34:42.592488Z","title":"Federated unlearning with knowledge distillation, 2022","venue":null,"work_id":"46131a2d-da86-4a3c-aa11-0ac6e78960d5","year":2022},"citing_paper":{"arxiv_id":"2501.12123","last_updated":"2025-09-01T15:07:28Z","snapshot_observed_at":"2026-08-10T17:27:00.409071Z","submitted_at":"2025-01-21T13:37:28Z","title":"FL-CLEANER: byzantine and backdoor defense by CLustering Errors of Activation maps in Non-iid fedErated leaRning","version":2},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-10T17:34:41.807423Z"},"links":{"citing_paper":"/paper/2501.12123"},"observation_digest":"sha256:e61a160f8faa3d42ed8858c800b2dddf5e361430bea2c367aed58ee8ee2c4463","observation_id":"5f5af21b-b2c0-4c04-91fc-543554e5b612","resolution":{"observed_at":"2026-08-10T17:34:42.597321Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T17:34:41.812375Z","title":"Advances and open problems in federated learning","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2501.12123","last_updated":"2025-09-01T15:07:28Z","snapshot_observed_at":"2026-08-10T17:27:00.409071Z","submitted_at":"2025-01-21T13:37:28Z","title":"FL-CLEANER: byzantine and backdoor defense by CLustering Errors of Activation maps in Non-iid fedErated leaRning","version":2},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-10T17:34:41.812375Z"},"links":{"citing_paper":"/paper/2501.12123"},"observation_digest":"sha256:fcc1a008d19bbc9e4eb239f17b2dd8505eb99d62a1965d0e2bd61a134ade8a6f","observation_id":"a74cf2f0-cfc1-4d0c-b78c-63884c6da735","resolution":{"observed_at":"2026-08-10T17:34:41.812375Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T17:34:42.568458Z","title":"Secure extraction of personal information from ehr by federated machine learning","venue":null,"work_id":"050742ef-c6ad-47bb-825a-0a75e5737520","year":2024},"citing_paper":{"arxiv_id":"2501.12123","last_updated":"2025-09-01T15:07:28Z","snapshot_observed_at":"2026-08-10T17:27:00.409071Z","submitted_at":"2025-01-21T13:37:28Z","title":"FL-CLEANER: byzantine and backdoor defense by CLustering Errors of Activation maps in Non-iid fedErated leaRning","version":2},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-10T17:34:41.821794Z"},"links":{"citing_paper":"/paper/2501.12123"},"observation_digest":"sha256:50066fc37d2ed8b7bdaebd38bc12b613cd75cf398e8fcfd6eb194a0bcaae7909","observation_id":"d3924960-6d74-4384-962d-65922ea4bc3a","resolution":{"observed_at":"2026-08-10T17:34:42.573044Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T17:34:42.554172Z","title":"Yuen, and Dacheng Tao","venue":null,"work_id":"9ca9ff00-a7b5-4ed8-92ce-08a4f1ca03f9","year":2023},"citing_paper":{"arxiv_id":"2501.12123","last_updated":"2025-09-01T15:07:28Z","snapshot_observed_at":"2026-08-10T17:27:00.409071Z","submitted_at":"2025-01-21T13:37:28Z","title":"FL-CLEANER: byzantine and backdoor defense by CLustering Errors of Activation maps in Non-iid fedErated leaRning","version":2},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-10T17:34:41.826141Z"},"links":{"citing_paper":"/paper/2501.12123"},"observation_digest":"sha256:782d445cc40d8c2bbff3e31a8d253846eb71b2e7645baf49239d5aaadb97bf00","observation_id":"8a02ae46-5742-490c-80c0-6f233a71ab45","resolution":{"observed_at":"2026-08-10T17:34:42.558661Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1806.00582","last_updated":"2022-07-21T12:33:15Z","snapshot_observed_at":"2026-07-06T06:42:35.645776Z","submitted_at":"2018-06-02T04:45:58Z","title":"Federated Learning with Non-IID Data","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1806.00582","snapshot_observed_at":"2026-08-10T17:34:41.830923Z","title":"Federated learning with non-iid data","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2501.12123","last_updated":"2025-09-01T15:07:28Z","snapshot_observed_at":"2026-08-10T17:27:00.409071Z","submitted_at":"2025-01-21T13:37:28Z","title":"FL-CLEANER: byzantine and backdoor defense by CLustering Errors of Activation maps in Non-iid fedErated leaRning","version":2},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-10T17:34:41.830923Z"},"links":{"cited_paper":"/paper/1806.00582","citing_paper":"/paper/2501.12123"},"observation_digest":"sha256:1ae253c64db737c01597a7b03c0bab6fe1d04a5e469edf371faa17bf4db0bc77","observation_id":"37e85195-bbb1-4736-ac01-7ac9ba7a7527","resolution":{"observed_at":"2026-08-10T17:34:41.830923Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T17:34:42.539442Z","title":"Badsfl: Backdoor attack against scaffold federated learning, 2024","venue":null,"work_id":"1478976b-0d48-4107-b7fe-0a171687e0df","year":2024},"citing_paper":{"arxiv_id":"2501.12123","last_updated":"2025-09-01T15:07:28Z","snapshot_observed_at":"2026-08-10T17:27:00.409071Z","submitted_at":"2025-01-21T13:37:28Z","title":"FL-CLEANER: byzantine and backdoor defense by CLustering Errors of Activation maps in Non-iid fedErated leaRning","version":2},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-10T17:34:41.835381Z"},"links":{"citing_paper":"/paper/2501.12123"},"observation_digest":"sha256:0fe2026fda53760a88d4e71ce690dbb93e76688158280911c9b18645faba2682","observation_id":"874d3f7e-520e-4411-a931-6191e10a8e45","resolution":{"observed_at":"2026-08-10T17:34:42.544207Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T17:34:42.523797Z","title":"Technical report: Assisting backdoor federated learning with whole population knowledge alignment, 2022","venue":null,"work_id":"824ef20a-88ed-4dfa-90e7-3f125edd662b","year":2022},"citing_paper":{"arxiv_id":"2501.12123","last_updated":"2025-09-01T15:07:28Z","snapshot_observed_at":"2026-08-10T17:27:00.409071Z","submitted_at":"2025-01-21T13:37:28Z","title":"FL-CLEANER: byzantine and backdoor defense by CLustering Errors of Activation maps in Non-iid fedErated leaRning","version":2},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-10T17:34:41.839850Z"},"links":{"citing_paper":"/paper/2501.12123"},"observation_digest":"sha256:01b15d5c8b2379a7d03743b18bb159a62e7a9fa65a05d4439212e182ceda0285","observation_id":"5d5a912a-f124-496a-a59b-97025a7c63ab","resolution":{"observed_at":"2026-08-10T17:34:42.529185Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T17:34:42.507468Z","title":"Hinton and R.R","venue":null,"work_id":"ffdd7442-bd83-4d35-91d4-f9b10c7fdaee","year":2006},"citing_paper":{"arxiv_id":"2501.12123","last_updated":"2025-09-01T15:07:28Z","snapshot_observed_at":"2026-08-10T17:27:00.409071Z","submitted_at":"2025-01-21T13:37:28Z","title":"FL-CLEANER: byzantine and backdoor defense by CLustering Errors of Activation maps in Non-iid fedErated leaRning","version":2},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-10T17:34:41.844159Z"},"links":{"citing_paper":"/paper/2501.12123"},"observation_digest":"sha256:870a17156d3c75001fe7d38fa89691fa16ab8f67d95876a1c6c6b4537696c158","observation_id":"13a4ee0b-c08b-4312-914a-e4484d986c04","resolution":{"observed_at":"2026-08-10T17:34:42.512356Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T17:34:42.491785Z","title":"Autoen- coders for dimensionality reduction in molecular dynamics: Collective variable dimension, biasing, and transition states","venue":null,"work_id":"342f44d4-128d-4895-8836-8283f0ed57a8","year":2023},"citing_paper":{"arxiv_id":"2501.12123","last_updated":"2025-09-01T15:07:28Z","snapshot_observed_at":"2026-08-10T17:27:00.409071Z","submitted_at":"2025-01-21T13:37:28Z","title":"FL-CLEANER: byzantine and backdoor defense by CLustering Errors of Activation maps in Non-iid fedErated leaRning","version":2},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-10T17:34:41.848782Z"},"links":{"citing_paper":"/paper/2501.12123"},"observation_digest":"sha256:7f8c447d98936706d6d07a3e4a2c78a6424a46ffae71751d939f389a7be4a587","observation_id":"c8b4b394-3b86-4448-8aba-9f5b9b8710b7","resolution":{"observed_at":"2026-08-10T17:34:42.496839Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T17:34:42.476681Z","title":"Bengio, and Pascal Vincent","venue":null,"work_id":"f4cbae6b-b7e1-4251-b6ba-93b7f83e89cb","year":2010},"citing_paper":{"arxiv_id":"2501.12123","last_updated":"2025-09-01T15:07:28Z","snapshot_observed_at":"2026-08-10T17:27:00.409071Z","submitted_at":"2025-01-21T13:37:28Z","title":"FL-CLEANER: byzantine and backdoor defense by CLustering Errors of Activation maps in Non-iid fedErated leaRning","version":2},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-10T17:34:41.853109Z"},"links":{"citing_paper":"/paper/2501.12123"},"observation_digest":"sha256:a540328faba0405730f7a4aa20dce3d33a77a918b77635d06695c7596a5378cc","observation_id":"efa8250b-b5dd-4c8a-954d-951e6f24403d","resolution":{"observed_at":"2026-08-10T17:34:42.481450Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T17:34:42.460923Z","title":"Bengio, Pascal Lamblin, Dan Popovici, and Hugo Larochelle","venue":null,"work_id":"bd0dac01-5a9c-451e-a46e-4212e615bb48","year":2007},"citing_paper":{"arxiv_id":"2501.12123","last_updated":"2025-09-01T15:07:28Z","snapshot_observed_at":"2026-08-10T17:27:00.409071Z","submitted_at":"2025-01-21T13:37:28Z","title":"FL-CLEANER: byzantine and backdoor defense by CLustering Errors of Activation maps in Non-iid fedErated leaRning","version":2},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-10T17:34:41.857632Z"},"links":{"citing_paper":"/paper/2501.12123"},"observation_digest":"sha256:3e5cc622ce1157d24e22af816817eb45dd8424746b20da4bc2a1895186a8653e","observation_id":"00218ff4-285e-4183-bc19-24e063c13c61","resolution":{"observed_at":"2026-08-10T17:34:42.466335Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T17:34:42.445945Z","title":"Attribute2image: Conditional image generation from visual attributes, 2016","venue":null,"work_id":"c584eae5-1838-4350-8521-856d062f0f4d","year":2016},"citing_paper":{"arxiv_id":"2501.12123","last_updated":"2025-09-01T15:07:28Z","snapshot_observed_at":"2026-08-10T17:27:00.409071Z","submitted_at":"2025-01-21T13:37:28Z","title":"FL-CLEANER: byzantine and backdoor defense by CLustering Errors of Activation maps in Non-iid fedErated leaRning","version":2},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-10T17:34:41.862117Z"},"links":{"citing_paper":"/paper/2501.12123"},"observation_digest":"sha256:39e261fedbfa23d0c4ed16b35efd0b22ac7988f053e6c0118d164b61cd8877b9","observation_id":"10dff161-e2ea-4677-9d7f-2300631d9ea2","resolution":{"observed_at":"2026-08-10T17:34:42.450902Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T17:34:41.866769Z","title":"Deep learning for anomaly detection: A review","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2501.12123","last_updated":"2025-09-01T15:07:28Z","snapshot_observed_at":"2026-08-10T17:27:00.409071Z","submitted_at":"2025-01-21T13:37:28Z","title":"FL-CLEANER: byzantine and backdoor defense by CLustering Errors of Activation maps in Non-iid fedErated leaRning","version":2},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-10T17:34:41.866769Z"},"links":{"citing_paper":"/paper/2501.12123"},"observation_digest":"sha256:94723ab12b912c8005931e45fbefe013c37c5f7be8e44c7b76370d9568140c2b","observation_id":"bf654e2a-559e-4f85-a7ff-cbc3103755a5","resolution":{"observed_at":"2026-08-10T17:34:41.866769Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1312.6114","last_updated":"2022-12-10T21:04:00Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2013-12-20T20:58:10Z","title":"Auto-Encoding Variational Bayes","version":11},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1312.6114","snapshot_observed_at":"2026-08-10T17:34:41.871397Z","title":"Auto-encoding variational bayes","venue":null,"work_id":null,"year":2013},"citing_paper":{"arxiv_id":"2501.12123","last_updated":"2025-09-01T15:07:28Z","snapshot_observed_at":"2026-08-10T17:27:00.409071Z","submitted_at":"2025-01-21T13:37:28Z","title":"FL-CLEANER: byzantine and backdoor defense by CLustering Errors of Activation maps in Non-iid fedErated leaRning","version":2},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-10T17:34:41.871397Z"},"links":{"cited_paper":"/paper/1312.6114","citing_paper":"/paper/2501.12123"},"observation_digest":"sha256:05e056fadb92d1d88ac1b389368ad7b3fce73be2c1756c2b94a8d442b6a44381","observation_id":"06578f8c-eaea-443f-bc66-a37c79cd77b4","resolution":{"observed_at":"2026-08-10T17:34:41.871397Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1606.05908","last_updated":"2021-01-03T16:56:46Z","snapshot_observed_at":"2026-08-10T10:13:44.536180Z","submitted_at":"2016-06-19T21:02:30Z","title":"Tutorial on Variational Autoencoders","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1606.05908","snapshot_observed_at":"2026-08-10T17:34:41.875888Z","title":"Tutorial on variational autoencoders","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2501.12123","last_updated":"2025-09-01T15:07:28Z","snapshot_observed_at":"2026-08-10T17:27:00.409071Z","submitted_at":"2025-01-21T13:37:28Z","title":"FL-CLEANER: byzantine and backdoor defense by CLustering Errors of Activation maps in Non-iid fedErated leaRning","version":2},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-10T17:34:41.875888Z"},"links":{"cited_paper":"/paper/1606.05908","citing_paper":"/paper/2501.12123"},"observation_digest":"sha256:e3dc654cac8085233998c2277f91599378117c5b8328d43b85c96cad303f9e40","observation_id":"96b47073-61f7-41b4-bd7a-cef2e0729191","resolution":{"observed_at":"2026-08-10T17:34:41.875888Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T17:34:42.422160Z","title":"Anomaly detection with conditional variational autoencoders","venue":null,"work_id":"6a08eddb-bc1c-42d6-892e-426f176ee330","year":2019},"citing_paper":{"arxiv_id":"2501.12123","last_updated":"2025-09-01T15:07:28Z","snapshot_observed_at":"2026-08-10T17:27:00.409071Z","submitted_at":"2025-01-21T13:37:28Z","title":"FL-CLEANER: byzantine and backdoor defense by CLustering Errors of Activation maps in Non-iid fedErated leaRning","version":2},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-10T17:34:41.880278Z"},"links":{"citing_paper":"/paper/2501.12123"},"observation_digest":"sha256:dc57531b9fb2b48e7a5cbba448f7e529ece492306840386789137d6a9f882303","observation_id":"18a51a07-4afb-462e-93ae-dd24bbbc9cf3","resolution":{"observed_at":"2026-08-10T17:34:42.426715Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T17:34:42.407584Z","title":"Distributed statistical machine learning in adversarial settings: Byzantine gradient descent","venue":null,"work_id":"8dd59c41-89fb-4d14-9e47-6afaa9627da8","year":2017},"citing_paper":{"arxiv_id":"2501.12123","last_updated":"2025-09-01T15:07:28Z","snapshot_observed_at":"2026-08-10T17:27:00.409071Z","submitted_at":"2025-01-21T13:37:28Z","title":"FL-CLEANER: byzantine and backdoor defense by CLustering Errors of Activation maps in Non-iid fedErated leaRning","version":2},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-10T17:34:41.884547Z"},"links":{"citing_paper":"/paper/2501.12123"},"observation_digest":"sha256:0b438bf5be73ab20960496c1f2e09738c91980bbe17ae1a5659dadf4dac3e91f","observation_id":"f503fc36-ce8a-4c5a-882b-fef03b1d77ad","resolution":{"observed_at":"2026-08-10T17:34:42.412267Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T17:34:41.889007Z","title":"Selvaraju, Michael Cogswell, Abhishek Das, Ramakrishna Vedantam, Devi Parikh, and Dhruv Batra","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2501.12123","last_updated":"2025-09-01T15:07:28Z","snapshot_observed_at":"2026-08-10T17:27:00.409071Z","submitted_at":"2025-01-21T13:37:28Z","title":"FL-CLEANER: byzantine and backdoor defense by CLustering Errors of Activation maps in Non-iid fedErated leaRning","version":2},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-10T17:34:41.889007Z"},"links":{"citing_paper":"/paper/2501.12123"},"observation_digest":"sha256:15f850b9521f9b87b185249935b0505de952e88d6a7df24deedae5b7a0de3128","observation_id":"b4056f94-1177-44ed-90ff-1495c44d8e34","resolution":{"observed_at":"2026-08-10T17:34:41.889007Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T17:34:42.383700Z","title":"Deepsigns: An end-to-end watermarking framework for ownership protection of deep neural networks","venue":null,"work_id":"2405f71d-5f44-4985-9de9-946ca737ec2c","year":2019},"citing_paper":{"arxiv_id":"2501.12123","last_updated":"2025-09-01T15:07:28Z","snapshot_observed_at":"2026-08-10T17:27:00.409071Z","submitted_at":"2025-01-21T13:37:28Z","title":"FL-CLEANER: byzantine and backdoor defense by CLustering Errors of Activation maps in Non-iid fedErated leaRning","version":2},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-10T17:34:41.893347Z"},"links":{"citing_paper":"/paper/2501.12123"},"observation_digest":"sha256:25525cc231ffdd6e56fb3f746717fd9ca133a6a84f5261bb99910b00e76c9970","observation_id":"8cd859da-5276-42d7-833e-b3d521ebc9cf","resolution":{"observed_at":"2026-08-10T17:34:42.388745Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2210.15745","last_updated":"2025-05-19T11:10:53Z","snapshot_observed_at":"2026-08-07T09:20:30.706763Z","submitted_at":"2022-10-27T19:48:26Z","title":"DICTION:DynamIC robusT whIte bOx watermarkiNg scheme for deep neural networks","version":2},"cited_work":{"arxiv_id":"2210.15745","doi":null,"metadata_source":"pith","pith_arxiv_id":"2210.15745","snapshot_observed_at":"2026-08-10T17:34:42.015282Z","title":"DICTION:DynamIC robusT whIte bOx watermarkiNg scheme for deep neural networks","venue":"cs.CR","work_id":"b3eb3aa3-9d1a-4357-8d55-1ed57294589a","year":2022},"citing_paper":{"arxiv_id":"2501.12123","last_updated":"2025-09-01T15:07:28Z","snapshot_observed_at":"2026-08-10T17:27:00.409071Z","submitted_at":"2025-01-21T13:37:28Z","title":"FL-CLEANER: byzantine and backdoor defense by CLustering Errors of Activation maps in Non-iid fedErated leaRning","version":2},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-10T17:34:41.897513Z"},"links":{"cited_paper":"/paper/2210.15745","citing_paper":"/paper/2501.12123"},"observation_digest":"sha256:cf73877a2b9c384f8b055d5008106ac7e0f098b5d738014fd27905522f367aa0","observation_id":"1fe95e0e-5e22-4dd7-8d2a-f5890fd0bea1","resolution":{"observed_at":"2026-08-10T17:34:42.022530Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T17:34:42.369661Z","title":"A high-load dnn watermarking scheme based on optimal embedding position","venue":null,"work_id":"0b9d269c-f403-4c1f-992e-3ec4afde5630","year":2024},"citing_paper":{"arxiv_id":"2501.12123","last_updated":"2025-09-01T15:07:28Z","snapshot_observed_at":"2026-08-10T17:27:00.409071Z","submitted_at":"2025-01-21T13:37:28Z","title":"FL-CLEANER: byzantine and backdoor defense by CLustering Errors of Activation maps in Non-iid fedErated leaRning","version":2},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-10T17:34:41.902298Z"},"links":{"citing_paper":"/paper/2501.12123"},"observation_digest":"sha256:cb708a855234932de6f54f13d8f62e2d32a8011e6872829b07bb7ad5c6a23e3c","observation_id":"6aa0432e-606a-4d8a-af89-f4cfcaac38c2","resolution":{"observed_at":"2026-08-10T17:34:42.374075Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T17:34:42.355211Z","title":"Patel, Tan Nguyen, and Richard G","venue":null,"work_id":"3a633a81-34ed-4b3e-9621-32248cfb42a1","year":2015},"citing_paper":{"arxiv_id":"2501.12123","last_updated":"2025-09-01T15:07:28Z","snapshot_observed_at":"2026-08-10T17:27:00.409071Z","submitted_at":"2025-01-21T13:37:28Z","title":"FL-CLEANER: byzantine and backdoor defense by CLustering Errors of Activation maps in Non-iid fedErated leaRning","version":2},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-10T17:34:41.906449Z"},"links":{"citing_paper":"/paper/2501.12123"},"observation_digest":"sha256:ccde20e8fbd43be29e43af04a4fa35090204dbb8ebe26380a6d988b0e7e26568","observation_id":"3a8ee7c6-3b37-48d0-b756-d194ec2c5cce","resolution":{"observed_at":"2026-08-10T17:34:42.360052Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T17:34:41.910816Z","title":"How to backdoor federated learning","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2501.12123","last_updated":"2025-09-01T15:07:28Z","snapshot_observed_at":"2026-08-10T17:27:00.409071Z","submitted_at":"2025-01-21T13:37:28Z","title":"FL-CLEANER: byzantine and backdoor defense by CLustering Errors of Activation maps in Non-iid fedErated leaRning","version":2},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-10T17:34:41.910816Z"},"links":{"citing_paper":"/paper/2501.12123"},"observation_digest":"sha256:83905572eb611f811d5041503532b1b6af2972a2300ab219a02475e94abb8fbb","observation_id":"a4287dc0-c04c-4ddd-9ee9-3432665becac","resolution":{"observed_at":"2026-08-10T17:34:41.910816Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T17:34:41.915286Z","title":"Local model poisoning attacks to {Byzantine-Robust} federated learning","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2501.12123","last_updated":"2025-09-01T15:07:28Z","snapshot_observed_at":"2026-08-10T17:27:00.409071Z","submitted_at":"2025-01-21T13:37:28Z","title":"FL-CLEANER: byzantine and backdoor defense by CLustering Errors of Activation maps in Non-iid fedErated leaRning","version":2},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-08-10T17:34:41.915286Z"},"links":{"citing_paper":"/paper/2501.12123"},"observation_digest":"sha256:035e2239ee0f6f484f128223e22d411221ed135c1bef4fd2665e5aee8b7dbb55","observation_id":"f3261836-d386-466f-aea8-09ab91cb9289","resolution":{"observed_at":"2026-08-10T17:34:41.915286Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T17:34:41.919689Z","title":"beta-V AE: Learning basic visual concepts with a constrained variational framework","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2501.12123","last_updated":"2025-09-01T15:07:28Z","snapshot_observed_at":"2026-08-10T17:27:00.409071Z","submitted_at":"2025-01-21T13:37:28Z","title":"FL-CLEANER: byzantine and backdoor defense by CLustering Errors of Activation maps in Non-iid fedErated leaRning","version":2},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-08-10T17:34:41.919689Z"},"links":{"citing_paper":"/paper/2501.12123"},"observation_digest":"sha256:446bb3dbaaaad71181983df0015aeb7856b1d93f212605f91bfd971728d09b96","observation_id":"b6849fc4-d751-49fc-bea2-9d4f9a15b90f","resolution":{"observed_at":"2026-08-10T17:34:41.919689Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1511.06349","last_updated":"2016-05-12T20:51:23Z","snapshot_observed_at":"2026-08-05T16:42:28.278134Z","submitted_at":"2015-11-19T20:38:45Z","title":"Generating Sentences from a Continuous Space","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1511.06349","snapshot_observed_at":"2026-08-10T17:34:41.923914Z","title":"Bowman, Luke Vilnis, Oriol Vinyals, Andrew M","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2501.12123","last_updated":"2025-09-01T15:07:28Z","snapshot_observed_at":"2026-08-10T17:27:00.409071Z","submitted_at":"2025-01-21T13:37:28Z","title":"FL-CLEANER: byzantine and backdoor defense by CLustering Errors of Activation maps in Non-iid fedErated leaRning","version":2},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-08-10T17:34:41.923914Z"},"links":{"cited_paper":"/paper/1511.06349","citing_paper":"/paper/2501.12123"},"observation_digest":"sha256:3e67e240182049f3d4f150e760e7c93f363b58bd9991807639387475f9e6e050","observation_id":"ab368964-369d-4d74-adb6-ea2262606fe6","resolution":{"observed_at":"2026-08-10T17:34:41.923914Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T17:34:42.313464Z","title":"Beyond vanilla variational autoencoders: Detecting posterior collapse in conditional and hierarchical variational autoencoders, 2024","venue":null,"work_id":"7ee41904-6ea0-487e-9440-424909b15344","year":2024},"citing_paper":{"arxiv_id":"2501.12123","last_updated":"2025-09-01T15:07:28Z","snapshot_observed_at":"2026-08-10T17:27:00.409071Z","submitted_at":"2025-01-21T13:37:28Z","title":"FL-CLEANER: byzantine and backdoor defense by CLustering Errors of Activation maps in Non-iid fedErated leaRning","version":2},"reference_index":58,"source":"pdf_text","source_observed_at":"2026-08-10T17:34:41.928711Z"},"links":{"citing_paper":"/paper/2501.12123"},"observation_digest":"sha256:e5138612f5a3d92914c3d7cd52eadae8d96bfa55d2b61635b17f34048f528693","observation_id":"a9094518-8e40-4ec0-ba46-8d2b3a850a38","resolution":{"observed_at":"2026-08-10T17:34:42.318348Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T17:34:42.298360Z","title":"A comprehensive survey of clustering algorithms: State-of-the-art machine learning applications, tax- onomy, challenges, and future research prospects","venue":null,"work_id":"807176ad-40b8-49a9-87c7-59db09a6b1f0","year":2022},"citing_paper":{"arxiv_id":"2501.12123","last_updated":"2025-09-01T15:07:28Z","snapshot_observed_at":"2026-08-10T17:27:00.409071Z","submitted_at":"2025-01-21T13:37:28Z","title":"FL-CLEANER: byzantine and backdoor defense by CLustering Errors of Activation maps in Non-iid fedErated leaRning","version":2},"reference_index":59,"source":"pdf_text","source_observed_at":"2026-08-10T17:34:41.933272Z"},"links":{"citing_paper":"/paper/2501.12123"},"observation_digest":"sha256:dc70e1491402c172161440bedf8eeeb208f214c66846bdcb9e4cc8d9cb4784e7","observation_id":"99c06899-0188-4254-b105-bdefd026ce18","resolution":{"observed_at":"2026-08-10T17:34:42.303376Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T17:34:41.937847Z","title":"The mnist database of handwritten digit images for machine learning research","venue":null,"work_id":null,"year":2012},"citing_paper":{"arxiv_id":"2501.12123","last_updated":"2025-09-01T15:07:28Z","snapshot_observed_at":"2026-08-10T17:27:00.409071Z","submitted_at":"2025-01-21T13:37:28Z","title":"FL-CLEANER: byzantine and backdoor defense by CLustering Errors of Activation maps in Non-iid fedErated leaRning","version":2},"reference_index":60,"source":"pdf_text","source_observed_at":"2026-08-10T17:34:41.937847Z"},"links":{"citing_paper":"/paper/2501.12123"},"observation_digest":"sha256:ca6cbdab6066b18a644e7e154bf847f723c077d0139c7b423bff56e7c5262379","observation_id":"db39eee2-bcd1-437f-b4fb-c70aa189ea08","resolution":{"observed_at":"2026-08-10T17:34:41.937847Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T17:34:41.942097Z","title":"Fashion-mnist: a novel image dataset for benchmarking machine learning algorithms, 2017","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2501.12123","last_updated":"2025-09-01T15:07:28Z","snapshot_observed_at":"2026-08-10T17:27:00.409071Z","submitted_at":"2025-01-21T13:37:28Z","title":"FL-CLEANER: byzantine and backdoor defense by CLustering Errors of Activation maps in Non-iid fedErated leaRning","version":2},"reference_index":61,"source":"pdf_text","source_observed_at":"2026-08-10T17:34:41.942097Z"},"links":{"citing_paper":"/paper/2501.12123"},"observation_digest":"sha256:6098c6b6e469d12ef203bd3f8e628cba670c4b8b10a691339afc0cdac93a0796","observation_id":"5899f48f-caee-4adf-98af-39c4be229a8c","resolution":{"observed_at":"2026-08-10T17:34:41.942097Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T17:34:42.263352Z","title":"Measuring the effects of non-identical data distribution for federated visual classification, 2019","venue":null,"work_id":"27e7dd2b-77fd-4c05-beef-35d947ff9190","year":2019},"citing_paper":{"arxiv_id":"2501.12123","last_updated":"2025-09-01T15:07:28Z","snapshot_observed_at":"2026-08-10T17:27:00.409071Z","submitted_at":"2025-01-21T13:37:28Z","title":"FL-CLEANER: byzantine and backdoor defense by CLustering Errors of Activation maps in Non-iid fedErated leaRning","version":2},"reference_index":62,"source":"pdf_text","source_observed_at":"2026-08-10T17:34:41.946133Z"},"links":{"citing_paper":"/paper/2501.12123"},"observation_digest":"sha256:b3bdbf49695c52a90a19924acdc01852d208c3909b6ea7ea0ae29f5662a650c2","observation_id":"c1cdcf48-2f96-4cd5-a6b2-4a9bdd61a6e1","resolution":{"observed_at":"2026-08-10T17:34:42.268506Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T17:34:42.248719Z","title":"Bayesian nonparametric federated learning of neural networks, 2019","venue":null,"work_id":"f4a81ff8-d221-4782-ad40-9754c6a4e660","year":2019},"citing_paper":{"arxiv_id":"2501.12123","last_updated":"2025-09-01T15:07:28Z","snapshot_observed_at":"2026-08-10T17:27:00.409071Z","submitted_at":"2025-01-21T13:37:28Z","title":"FL-CLEANER: byzantine and backdoor defense by CLustering Errors of Activation maps in Non-iid fedErated leaRning","version":2},"reference_index":63,"source":"pdf_text","source_observed_at":"2026-08-10T17:34:41.950242Z"},"links":{"citing_paper":"/paper/2501.12123"},"observation_digest":"sha256:0d680d1dd69f7b866c5340a07dfc6c3a758dcf127a82b0d736d20d3d4b196ba5","observation_id":"bea4c14f-ab05-4450-b6be-707109cdd2c5","resolution":{"observed_at":"2026-08-10T17:34:42.253542Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T17:34:42.233930Z","title":"Distributed backdoor attacks on federated graph learning and certified defenses, 2024","venue":null,"work_id":"2075e895-6c2e-4fa9-88ef-e417dd63b1d8","year":2024},"citing_paper":{"arxiv_id":"2501.12123","last_updated":"2025-09-01T15:07:28Z","snapshot_observed_at":"2026-08-10T17:27:00.409071Z","submitted_at":"2025-01-21T13:37:28Z","title":"FL-CLEANER: byzantine and backdoor defense by CLustering Errors of Activation maps in Non-iid fedErated leaRning","version":2},"reference_index":64,"source":"pdf_text","source_observed_at":"2026-08-10T17:34:41.954548Z"},"links":{"citing_paper":"/paper/2501.12123"},"observation_digest":"sha256:2aa357d1a7645ea9420a1a5bbae6963a6a4e86a61694d6beaa99bd8894203228","observation_id":"ae470260-2f6c-49b1-83db-ef08c878d02c","resolution":{"observed_at":"2026-08-10T17:34:42.238579Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T17:34:42.219422Z","title":"Mahoney, Joseph E","venue":null,"work_id":"2f78f51c-724f-4df5-9de3-776e57ef14a8","year":2022},"citing_paper":{"arxiv_id":"2501.12123","last_updated":"2025-09-01T15:07:28Z","snapshot_observed_at":"2026-08-10T17:27:00.409071Z","submitted_at":"2025-01-21T13:37:28Z","title":"FL-CLEANER: byzantine and backdoor defense by CLustering Errors of Activation maps in Non-iid fedErated leaRning","version":2},"reference_index":65,"source":"pdf_text","source_observed_at":"2026-08-10T17:34:41.959072Z"},"links":{"citing_paper":"/paper/2501.12123"},"observation_digest":"sha256:7b7744939b10a332a1adfef21632d45fff124680beb01721f091f3da9a0a1afc","observation_id":"08cef7ef-9b5e-411f-9ce0-0c619009cf09","resolution":{"observed_at":"2026-08-10T17:34:42.223973Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T17:34:42.204920Z","title":"Pham, Khoa Doan, and Kok-Seng Wong","venue":null,"work_id":"1f1877ed-e76f-4445-bbda-45d2380f6f9b","year":2023},"citing_paper":{"arxiv_id":"2501.12123","last_updated":"2025-09-01T15:07:28Z","snapshot_observed_at":"2026-08-10T17:27:00.409071Z","submitted_at":"2025-01-21T13:37:28Z","title":"FL-CLEANER: byzantine and backdoor defense by CLustering Errors of Activation maps in Non-iid fedErated leaRning","version":2},"reference_index":66,"source":"pdf_text","source_observed_at":"2026-08-10T17:34:41.963520Z"},"links":{"citing_paper":"/paper/2501.12123"},"observation_digest":"sha256:04a3504186a1183a4462896afb5840209e3091c53e1e7a8c70e2aef20c0c455b","observation_id":"ecc146c9-d3ab-4e4b-8cbc-c44441244f90","resolution":{"observed_at":"2026-08-10T17:34:42.209740Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2501.12123","last_updated":"2025-09-01T15:07:28Z","latest_version":2,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-10T17:27:00.409071Z","submitted_at":"2025-01-21T13:37:28Z","title":"FL-CLEANER: byzantine and backdoor defense by CLustering Errors of Activation maps in Non-iid fedErated leaRning"},"reference_resolution":{"displayed":65,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":22,"verified_exact":3,"verified_fuzzy":40},"total_outbound_references":65},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"thesis":"As of 11 August 2026, this Paper Citation Record lists 65 of 65 outbound references and 0 inbound Pith citation observations for arXiv:2501.12123."}