{"as_of":"2026-08-09T08:24:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:95294964dcfae41280320663c30c1ac0e67bfa356ad33d96b381ea4e1157c834","coverage":[{"denominator":36,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":36,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T19:18:22.042145Z","state":"measured"},{"denominator":36,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":36,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-09T06:31:02.800959+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2502.10490/citation-record","integrity":"/paper/2502.10490/integrity","json":"/paper/2502.10490/citation-record.json","paper":"/paper/2502.10490"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T19:18:22.951972Z","title":"Speech recognition with deep recurrent neural networks,","venue":null,"work_id":"34e2de78-a9b9-4c18-8075-f929122d00d3","year":2013},"citing_paper":{"arxiv_id":"2502.10490","last_updated":"2025-02-14T13:15:13Z","snapshot_observed_at":"2026-08-07T19:10:57.274990Z","submitted_at":"2025-02-14T13:15:13Z","title":"A Robust Attack: Displacement Backdoor Attack","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-07T19:18:21.908006Z"},"links":{"citing_paper":"/paper/2502.10490"},"observation_digest":"sha256:2e0d6737628cd039fb696a8c552b2a59af26f12aa79f486ce86c094d34e3fea3","observation_id":"25d09a0e-e9c6-420b-802a-72221c21c437","resolution":{"observed_at":"2026-08-07T19:18:22.956440Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T19:18:21.911969Z","title":"Deep residual learning for image recognition,","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2502.10490","last_updated":"2025-02-14T13:15:13Z","snapshot_observed_at":"2026-08-07T19:10:57.274990Z","submitted_at":"2025-02-14T13:15:13Z","title":"A Robust Attack: Displacement Backdoor Attack","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-07T19:18:21.911969Z"},"links":{"citing_paper":"/paper/2502.10490"},"observation_digest":"sha256:ab213807af9e1a3cf4fc81248e23570defd1a290582386a6b8137967bd018be6","observation_id":"c37fffb2-66f3-4ecb-9a43-e6832d70a026","resolution":{"observed_at":"2026-08-07T19:18:21.911969Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T19:18:22.933068Z","title":"Imagenet classification with deep convolutional neural networks,","venue":null,"work_id":"a90ab8f4-6832-4b08-9dad-cb68d976d2af","year":2012},"citing_paper":{"arxiv_id":"2502.10490","last_updated":"2025-02-14T13:15:13Z","snapshot_observed_at":"2026-08-07T19:10:57.274990Z","submitted_at":"2025-02-14T13:15:13Z","title":"A Robust Attack: Displacement Backdoor Attack","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-07T19:18:21.916384Z"},"links":{"citing_paper":"/paper/2502.10490"},"observation_digest":"sha256:5f2523ca46053fd22f1940827bf04080d60a1aa92b1a9d6bebeaf9047e9f5c59","observation_id":"5f91adcf-83ca-40ef-9346-4eb9b9a236a3","resolution":{"observed_at":"2026-08-07T19:18:22.937745Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T19:18:22.922406Z","title":"Past, present, and future of face recognition: A review,","venue":null,"work_id":"1f8be183-d9b4-40df-afb5-7ad02cbf0eda","year":2020},"citing_paper":{"arxiv_id":"2502.10490","last_updated":"2025-02-14T13:15:13Z","snapshot_observed_at":"2026-08-07T19:10:57.274990Z","submitted_at":"2025-02-14T13:15:13Z","title":"A Robust Attack: Displacement Backdoor Attack","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-07T19:18:21.921377Z"},"links":{"citing_paper":"/paper/2502.10490"},"observation_digest":"sha256:fe1d99d83e41e7cdc22bafb269ce47c7a4585a8ec49df72df50c325cd27f745f","observation_id":"003fcb55-4ef4-4d23-9135-f606a9783da9","resolution":{"observed_at":"2026-08-07T19:18:22.926278Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T19:18:22.832686Z","title":"Computing systems for autonomous driving: State of the art and challenges,","venue":null,"work_id":"e4c078bd-dd3f-422e-89d2-539f2666fe8a","year":2020},"citing_paper":{"arxiv_id":"2502.10490","last_updated":"2025-02-14T13:15:13Z","snapshot_observed_at":"2026-08-07T19:10:57.274990Z","submitted_at":"2025-02-14T13:15:13Z","title":"A Robust Attack: Displacement Backdoor Attack","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-07T19:18:21.925402Z"},"links":{"citing_paper":"/paper/2502.10490"},"observation_digest":"sha256:dbecdf0b9610b88428861804864e98426b7704f1fb40485c1e89272563683426","observation_id":"6d5dcfce-9c84-49ac-8f96-451f5a0d4a4a","resolution":{"observed_at":"2026-08-07T19:18:22.891197Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T19:18:22.647731Z","title":"Mrtrix3: A fast, flexible and open software framework for medical image processing and visualisation,","venue":null,"work_id":"4d0802e8-8cbc-4c17-801b-50570ca3cb1d","year":2019},"citing_paper":{"arxiv_id":"2502.10490","last_updated":"2025-02-14T13:15:13Z","snapshot_observed_at":"2026-08-07T19:10:57.274990Z","submitted_at":"2025-02-14T13:15:13Z","title":"A Robust Attack: Displacement Backdoor Attack","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-07T19:18:21.929204Z"},"links":{"citing_paper":"/paper/2502.10490"},"observation_digest":"sha256:ce34c4fd221b270b4e5ee8470921d5f028e51ecbb9ecbed025ef40014165c871","observation_id":"b6263a16-9a4a-433f-8433-c61cb1cc823d","resolution":{"observed_at":"2026-08-07T19:18:22.728671Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T19:18:22.599248Z","title":"Sequence to sequence learning with neural networks,","venue":null,"work_id":"51eb5461-47b2-46f8-a585-723d9ab33c63","year":2014},"citing_paper":{"arxiv_id":"2502.10490","last_updated":"2025-02-14T13:15:13Z","snapshot_observed_at":"2026-08-07T19:10:57.274990Z","submitted_at":"2025-02-14T13:15:13Z","title":"A Robust Attack: Displacement Backdoor Attack","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-07T19:18:21.933241Z"},"links":{"citing_paper":"/paper/2502.10490"},"observation_digest":"sha256:1a753d1ac76d7659b535697fa95a30eca9e7eac0c30a0bfc324f2cac422b9a82","observation_id":"a80c73a1-fce3-4628-842a-45cad251560f","resolution":{"observed_at":"2026-08-07T19:18:22.603134Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T19:18:22.588400Z","title":"Badnets: Identifying vulnerabili- ties in the machine learning model supply chain,","venue":null,"work_id":"58b71ec8-57e2-417b-9849-e13f67f9a9a1","year":2019},"citing_paper":{"arxiv_id":"2502.10490","last_updated":"2025-02-14T13:15:13Z","snapshot_observed_at":"2026-08-07T19:10:57.274990Z","submitted_at":"2025-02-14T13:15:13Z","title":"A Robust Attack: Displacement Backdoor Attack","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-07T19:18:21.937000Z"},"links":{"citing_paper":"/paper/2502.10490"},"observation_digest":"sha256:f12db89b500dd68b711ec94e3ef1df467961a56d4ac9dcda6a54338c27702f9d","observation_id":"0c610f35-8302-4f07-902c-505651de629d","resolution":{"observed_at":"2026-08-07T19:18:22.592407Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1712.05526","last_updated":"2017-12-15T04:26:26Z","snapshot_observed_at":"2026-07-06T06:14:30.795326Z","submitted_at":"2017-12-15T04:26:26Z","title":"Targeted Backdoor Attacks on Deep Learning Systems Using Data Poisoning","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1712.05526","snapshot_observed_at":"2026-08-07T19:18:21.941470Z","title":"Targeted backdoor attacks on deep learning systems using data poisoning,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2502.10490","last_updated":"2025-02-14T13:15:13Z","snapshot_observed_at":"2026-08-07T19:10:57.274990Z","submitted_at":"2025-02-14T13:15:13Z","title":"A Robust Attack: Displacement Backdoor Attack","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-07T19:18:21.941470Z"},"links":{"cited_paper":"/paper/1712.05526","citing_paper":"/paper/2502.10490"},"observation_digest":"sha256:9164fe74af4e0a201af7f21490e7d43ccb206d5cb27fb717bcad882826711a05","observation_id":"e2fd6bdf-b9b7-41f3-a51e-911386e0aa97","resolution":{"observed_at":"2026-08-07T19:18:21.941470Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T19:18:22.577425Z","title":"Reflection backdoor: A natural backdoor attack on deep neural networks,","venue":null,"work_id":"b12b185f-5bbc-4377-8028-20d5af33f986","year":2020},"citing_paper":{"arxiv_id":"2502.10490","last_updated":"2025-02-14T13:15:13Z","snapshot_observed_at":"2026-08-07T19:10:57.274990Z","submitted_at":"2025-02-14T13:15:13Z","title":"A Robust Attack: Displacement Backdoor Attack","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-07T19:18:21.945186Z"},"links":{"citing_paper":"/paper/2502.10490"},"observation_digest":"sha256:d6c4a8614565de6d3523bab4cecf1e97a514f5a4e9161af587261f0e54757ff7","observation_id":"0935c5cd-037a-4b68-a33a-791f554fd282","resolution":{"observed_at":"2026-08-07T19:18:22.582046Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T19:18:22.566240Z","title":"A new backdoor attack in cnns by training set corruption without label poisoning,","venue":null,"work_id":"4b311f32-410f-4a1e-a2e2-98dcdf645125","year":2019},"citing_paper":{"arxiv_id":"2502.10490","last_updated":"2025-02-14T13:15:13Z","snapshot_observed_at":"2026-08-07T19:10:57.274990Z","submitted_at":"2025-02-14T13:15:13Z","title":"A Robust Attack: Displacement Backdoor Attack","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-07T19:18:21.948511Z"},"links":{"citing_paper":"/paper/2502.10490"},"observation_digest":"sha256:70e0842cc58d3a6a9f1202c5a8bdcce8c00f9685b1ed0ff444e6df0b601011bb","observation_id":"fc4888c8-c65e-4fec-966e-13c8b6ed73e6","resolution":{"observed_at":"2026-08-07T19:18:22.570496Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2102.10369","last_updated":"2021-03-04T04:09:38Z","snapshot_observed_at":"2026-08-02T13:52:44.392403Z","submitted_at":"2021-02-20T15:25:36Z","title":"WaNet -- Imperceptible Warping-based Backdoor Attack","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2102.10369","snapshot_observed_at":"2026-08-07T19:18:21.952290Z","title":"Wanet–imperceptible warping-based backdoor attack,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2502.10490","last_updated":"2025-02-14T13:15:13Z","snapshot_observed_at":"2026-08-07T19:10:57.274990Z","submitted_at":"2025-02-14T13:15:13Z","title":"A Robust Attack: Displacement Backdoor Attack","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-07T19:18:21.952290Z"},"links":{"cited_paper":"/paper/2102.10369","citing_paper":"/paper/2502.10490"},"observation_digest":"sha256:eebec375c7af2e11c0076f024c5252d18985e44f4998db021dc13451d0e1b8b4","observation_id":"c553e06f-76c0-42c9-87a2-eab7192e23e8","resolution":{"observed_at":"2026-08-07T19:18:21.952290Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T19:18:22.554606Z","title":"Invisible backdoor attack with sample-specific triggers,","venue":null,"work_id":"7c254fda-131c-4bea-91e7-91fe24f411a9","year":2021},"citing_paper":{"arxiv_id":"2502.10490","last_updated":"2025-02-14T13:15:13Z","snapshot_observed_at":"2026-08-07T19:10:57.274990Z","submitted_at":"2025-02-14T13:15:13Z","title":"A Robust Attack: Displacement Backdoor Attack","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-07T19:18:21.956150Z"},"links":{"citing_paper":"/paper/2502.10490"},"observation_digest":"sha256:8055de73800ceb64f256a1ccfeb757f57fb6df969649f434b67beb57cb3ea2db","observation_id":"7e80aaaf-beda-4ab2-92f2-dc3cfd933028","resolution":{"observed_at":"2026-08-07T19:18:22.559136Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T19:18:22.544089Z","title":"Lira: Learnable, imperceptible and robust backdoor attacks,","venue":null,"work_id":"caef57a0-4444-415a-a95d-90535b92ad77","year":2021},"citing_paper":{"arxiv_id":"2502.10490","last_updated":"2025-02-14T13:15:13Z","snapshot_observed_at":"2026-08-07T19:10:57.274990Z","submitted_at":"2025-02-14T13:15:13Z","title":"A Robust Attack: Displacement Backdoor Attack","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-07T19:18:21.959571Z"},"links":{"citing_paper":"/paper/2502.10490"},"observation_digest":"sha256:c17643a5c3b3448f88855849e07a65e61ef88b6a2bb175446ec25973cee31ee7","observation_id":"ef797dc2-f74e-49f7-bfbd-b30ec77e9a41","resolution":{"observed_at":"2026-08-07T19:18:22.547295Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2212.09067","last_updated":"2022-12-18T11:30:59Z","snapshot_observed_at":"2026-08-05T17:14:24.121423Z","submitted_at":"2022-12-18T11:30:59Z","title":"Fine-Tuning Is All You Need to Mitigate Backdoor Attacks","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2212.09067","snapshot_observed_at":"2026-08-07T19:18:21.963182Z","title":"Fine- tuning is all you need to mitigate backdoor attacks,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2502.10490","last_updated":"2025-02-14T13:15:13Z","snapshot_observed_at":"2026-08-07T19:10:57.274990Z","submitted_at":"2025-02-14T13:15:13Z","title":"A Robust Attack: Displacement Backdoor Attack","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-07T19:18:21.963182Z"},"links":{"cited_paper":"/paper/2212.09067","citing_paper":"/paper/2502.10490"},"observation_digest":"sha256:fbdea94fafc037b0a614308284b0b06e28eef6daa1038f7c3a84af69c7bf53fa","observation_id":"dcafe3c7-f71e-4132-b019-fdb3f24b7db3","resolution":{"observed_at":"2026-08-07T19:18:21.963182Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T19:18:22.532480Z","title":"Few-shot backdoor defense using shapley estimation,","venue":null,"work_id":"47d22f5d-6c10-4bf1-a9cd-6e449df751a0","year":2022},"citing_paper":{"arxiv_id":"2502.10490","last_updated":"2025-02-14T13:15:13Z","snapshot_observed_at":"2026-08-07T19:10:57.274990Z","submitted_at":"2025-02-14T13:15:13Z","title":"A Robust Attack: Displacement Backdoor Attack","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-07T19:18:21.967090Z"},"links":{"citing_paper":"/paper/2502.10490"},"observation_digest":"sha256:ebf1cd99bd01ab790a45b2e09b4a2578c728ee81daf702d157b13f47ad2b8b7e","observation_id":"d46d5cac-6d4b-43d0-a631-46df93ac7368","resolution":{"observed_at":"2026-08-07T19:18:22.536399Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2002.12162","last_updated":"2025-03-26T03:12:17Z","snapshot_observed_at":"2026-08-09T06:08:45.939642Z","submitted_at":"2020-02-26T02:03:00Z","title":"Defending against Backdoor Attack on Deep Neural Networks","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2002.12162","snapshot_observed_at":"2026-08-07T19:18:21.970381Z","title":"Defending against back- door attack on deep neural networks,","venue":null,"work_id":null,"year":2002},"citing_paper":{"arxiv_id":"2502.10490","last_updated":"2025-02-14T13:15:13Z","snapshot_observed_at":"2026-08-07T19:10:57.274990Z","submitted_at":"2025-02-14T13:15:13Z","title":"A Robust Attack: Displacement Backdoor Attack","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-07T19:18:21.970381Z"},"links":{"cited_paper":"/paper/2002.12162","citing_paper":"/paper/2502.10490"},"observation_digest":"sha256:0d106540967b83b8f84508a5dd73d3fc020610e69336d586c3b193666d206b0b","observation_id":"3655fb3b-7cd1-4ec4-96f5-e9bf8b9d33f7","resolution":{"observed_at":"2026-08-07T19:18:21.970381Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T19:18:22.521118Z","title":"Fine-pruning: Defending against backdooring attacks on deep neural networks,","venue":null,"work_id":"3ab4a7be-1193-4beb-a576-70d15b4d0c44","year":2018},"citing_paper":{"arxiv_id":"2502.10490","last_updated":"2025-02-14T13:15:13Z","snapshot_observed_at":"2026-08-07T19:10:57.274990Z","submitted_at":"2025-02-14T13:15:13Z","title":"A Robust Attack: Displacement Backdoor Attack","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-07T19:18:21.975191Z"},"links":{"citing_paper":"/paper/2502.10490"},"observation_digest":"sha256:11d09f3bdcc671a3df70b677670b51aba2a183782043c55ecd55f11c2b71405d","observation_id":"947b2e74-8df1-4674-b2d0-34c5784b79a0","resolution":{"observed_at":"2026-08-07T19:18:22.525239Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2101.05930","last_updated":"2021-01-27T06:23:25Z","snapshot_observed_at":"2026-07-06T10:32:42.591643Z","submitted_at":"2021-01-15T01:35:22Z","title":"Neural Attention Distillation: Erasing Backdoor Triggers from Deep Neural Networks","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2101.05930","snapshot_observed_at":"2026-08-07T19:18:21.979217Z","title":"Neural attention distillation: Erasing backdoor triggers from deep neural networks,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2502.10490","last_updated":"2025-02-14T13:15:13Z","snapshot_observed_at":"2026-08-07T19:10:57.274990Z","submitted_at":"2025-02-14T13:15:13Z","title":"A Robust Attack: Displacement Backdoor Attack","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-07T19:18:21.979217Z"},"links":{"cited_paper":"/paper/2101.05930","citing_paper":"/paper/2502.10490"},"observation_digest":"sha256:33cff38a3bc96f3a48e0a5edf8734a81bc1920ac66fc9093642c079db36a8983","observation_id":"e8bbf724-6b09-4573-bb31-b90086f24b79","resolution":{"observed_at":"2026-08-07T19:18:21.979217Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T19:18:22.501876Z","title":"Disabling backdoor and identifying poison data by using knowledge distillation in backdoor attacks on deep neural networks,","venue":null,"work_id":"1d25a723-5978-4dea-8824-cfc934698ca1","year":2020},"citing_paper":{"arxiv_id":"2502.10490","last_updated":"2025-02-14T13:15:13Z","snapshot_observed_at":"2026-08-07T19:10:57.274990Z","submitted_at":"2025-02-14T13:15:13Z","title":"A Robust Attack: Displacement Backdoor Attack","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-07T19:18:21.983453Z"},"links":{"citing_paper":"/paper/2502.10490"},"observation_digest":"sha256:f30cbf5ac2b497b85e0d5c33e71e3157f7742160a6dd6cc771da9f12a068d723","observation_id":"0a726bc9-2419-413c-aa7b-935b4fe4cc68","resolution":{"observed_at":"2026-08-07T19:18:22.513902Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T19:18:22.386066Z","title":"Anti-backdoor learning: Training clean models on poisoned data,","venue":null,"work_id":"a67dfe42-1931-460a-bc9b-b22f34fe18a8","year":2021},"citing_paper":{"arxiv_id":"2502.10490","last_updated":"2025-02-14T13:15:13Z","snapshot_observed_at":"2026-08-07T19:10:57.274990Z","submitted_at":"2025-02-14T13:15:13Z","title":"A Robust Attack: Displacement Backdoor Attack","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-07T19:18:21.987202Z"},"links":{"citing_paper":"/paper/2502.10490"},"observation_digest":"sha256:89679a3f0f2137511491f623a654f52f67d64937730b4f60f4bbe0dc50949b58","observation_id":"d085d6b0-aa54-45ff-9ecb-f362c011ae37","resolution":{"observed_at":"2026-08-07T19:18:22.435924Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T19:18:22.289804Z","title":"Deepsweep: An evaluation framework for mitigating dnn backdoor attacks using data augmentation,","venue":null,"work_id":"78fe0b94-96a5-43ab-9aa4-f1da38818c39","year":2021},"citing_paper":{"arxiv_id":"2502.10490","last_updated":"2025-02-14T13:15:13Z","snapshot_observed_at":"2026-08-07T19:10:57.274990Z","submitted_at":"2025-02-14T13:15:13Z","title":"A Robust Attack: Displacement Backdoor Attack","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-07T19:18:21.991356Z"},"links":{"citing_paper":"/paper/2502.10490"},"observation_digest":"sha256:19015b936d08c6232c2bf45aaaabe4a92b71d9755e85d00499469811c199c0a1","observation_id":"62b205cc-d847-4340-bb7c-691e8ef6f64c","resolution":{"observed_at":"2026-08-07T19:18:22.324866Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T19:18:22.253065Z","title":"Strong data augmentation sani- tizes poisoning and backdoor attacks without an accuracy tradeoff,","venue":null,"work_id":"36a84e4d-29fe-49a8-93df-ac92328fda64","year":2021},"citing_paper":{"arxiv_id":"2502.10490","last_updated":"2025-02-14T13:15:13Z","snapshot_observed_at":"2026-08-07T19:10:57.274990Z","submitted_at":"2025-02-14T13:15:13Z","title":"A Robust Attack: Displacement Backdoor Attack","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-07T19:18:21.994904Z"},"links":{"citing_paper":"/paper/2502.10490"},"observation_digest":"sha256:f51c8278d6ea05abf9f856271eb99614e0378cb9b5de34d80b8bf68daa6a2f14","observation_id":"b7371ff2-56c1-47e9-bd05-24fb47a242da","resolution":{"observed_at":"2026-08-07T19:18:22.256680Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T19:18:22.242046Z","title":"Countermeasure against backdoor attack on neural networks utilizing knowledge distillation,","venue":null,"work_id":"b574e956-15db-4d05-83cc-fa896a527e0d","year":2020},"citing_paper":{"arxiv_id":"2502.10490","last_updated":"2025-02-14T13:15:13Z","snapshot_observed_at":"2026-08-07T19:10:57.274990Z","submitted_at":"2025-02-14T13:15:13Z","title":"A Robust Attack: Displacement Backdoor Attack","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-07T19:18:21.998243Z"},"links":{"citing_paper":"/paper/2502.10490"},"observation_digest":"sha256:f855ce72975a8bb56fdab8787652d5bdd1dcdfbc0edf3efc3dafba3bfc532b20","observation_id":"4f88ad73-b77f-4d07-a7c3-d1612a948afa","resolution":{"observed_at":"2026-08-07T19:18:22.245558Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T19:18:22.001967Z","title":"Input-aware dynamic backdoor attack,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2502.10490","last_updated":"2025-02-14T13:15:13Z","snapshot_observed_at":"2026-08-07T19:10:57.274990Z","submitted_at":"2025-02-14T13:15:13Z","title":"A Robust Attack: Displacement Backdoor Attack","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-07T19:18:22.001967Z"},"links":{"citing_paper":"/paper/2502.10490"},"observation_digest":"sha256:daf8558b56ba570d1b99969e99fd4271fdd44c73d52e9b3cce5a5eba2d6ae928","observation_id":"f2d7ebc2-01a2-4981-9be9-581997452699","resolution":{"observed_at":"2026-08-07T19:18:22.001967Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T19:18:22.225431Z","title":"Transferable clean-label poisoning attacks on deep neural nets,","venue":null,"work_id":"f3f6f117-3573-4783-ab89-d7f2c5cd2c14","year":2019},"citing_paper":{"arxiv_id":"2502.10490","last_updated":"2025-02-14T13:15:13Z","snapshot_observed_at":"2026-08-07T19:10:57.274990Z","submitted_at":"2025-02-14T13:15:13Z","title":"A Robust Attack: Displacement Backdoor Attack","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-07T19:18:22.005431Z"},"links":{"citing_paper":"/paper/2502.10490"},"observation_digest":"sha256:4c1a9713569da1969216f3c1e7325b748f52a354c6911b57307ef00a1e1258f5","observation_id":"a282a11a-c93b-4344-b256-26efa57b7905","resolution":{"observed_at":"2026-08-07T19:18:22.229456Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T19:18:22.214933Z","title":"Composite backdoor attack for deep neural network by mixing existing benign features,","venue":null,"work_id":"93c65092-8bd7-423a-908b-5ef0653ead7f","year":2020},"citing_paper":{"arxiv_id":"2502.10490","last_updated":"2025-02-14T13:15:13Z","snapshot_observed_at":"2026-08-07T19:10:57.274990Z","submitted_at":"2025-02-14T13:15:13Z","title":"A Robust Attack: Displacement Backdoor Attack","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-07T19:18:22.009049Z"},"links":{"citing_paper":"/paper/2502.10490"},"observation_digest":"sha256:d313cdde5c46704cda9898b61cefcff8420de1476927cd37f7999a7e748d90dc","observation_id":"3bbace70-05ec-43d6-af56-c3e9d94bf986","resolution":{"observed_at":"2026-08-07T19:18:22.218856Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1912.02771","last_updated":"2019-12-06T23:16:45Z","snapshot_observed_at":"2026-08-04T11:47:47.518305Z","submitted_at":"2019-12-05T18:05:59Z","title":"Label-Consistent Backdoor Attacks","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1912.02771","snapshot_observed_at":"2026-08-07T19:18:22.013079Z","title":"Label-consistent backdoor at- tacks,","venue":null,"work_id":null,"year":1912},"citing_paper":{"arxiv_id":"2502.10490","last_updated":"2025-02-14T13:15:13Z","snapshot_observed_at":"2026-08-07T19:10:57.274990Z","submitted_at":"2025-02-14T13:15:13Z","title":"A Robust Attack: Displacement Backdoor Attack","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-07T19:18:22.013079Z"},"links":{"cited_paper":"/paper/1912.02771","citing_paper":"/paper/2502.10490"},"observation_digest":"sha256:5ff0244c0cba96a24a03989e05e56f29a5fec5c35626dcbe170828dd541d843d","observation_id":"6549ef1b-3de3-442f-abb1-46b7b18557ad","resolution":{"observed_at":"2026-08-07T19:18:22.013079Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2304.11823","last_updated":"2023-04-24T05:13:52Z","snapshot_observed_at":"2026-07-06T15:19:08.624764Z","submitted_at":"2023-04-24T05:13:52Z","title":"Enhancing Fine-Tuning Based Backdoor Defense with Sharpness-Aware Minimization","version":1},"cited_work":{"arxiv_id":"2304.11823","doi":null,"metadata_source":"pith","pith_arxiv_id":"2304.11823","snapshot_observed_at":"2026-08-07T19:18:22.089160Z","title":"Enhancing Fine-Tuning Based Backdoor Defense with Sharpness-Aware Minimization","venue":"cs.AI","work_id":"d935a4d6-de22-469b-a75a-6c0d2ba62524","year":2023},"citing_paper":{"arxiv_id":"2502.10490","last_updated":"2025-02-14T13:15:13Z","snapshot_observed_at":"2026-08-07T19:10:57.274990Z","submitted_at":"2025-02-14T13:15:13Z","title":"A Robust Attack: Displacement Backdoor Attack","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-07T19:18:22.016855Z"},"links":{"cited_paper":"/paper/2304.11823","citing_paper":"/paper/2502.10490"},"observation_digest":"sha256:98f29160ce10c59388f6dbf1a1161bc0bce293888bc5fc30ec001780a2422041","observation_id":"51316261-4efa-467d-92a0-92ca6a171f69","resolution":{"observed_at":"2026-08-07T19:18:22.095153Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1811.03728","last_updated":"2018-11-09T01:08:00Z","snapshot_observed_at":"2026-07-06T07:13:39.005894Z","submitted_at":"2018-11-09T01:08:00Z","title":"Detecting Backdoor Attacks on Deep Neural Networks by Activation Clustering","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1811.03728","snapshot_observed_at":"2026-08-07T19:18:22.020589Z","title":"Detecting backdoor attacks on deep neural networks by activation clustering,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2502.10490","last_updated":"2025-02-14T13:15:13Z","snapshot_observed_at":"2026-08-07T19:10:57.274990Z","submitted_at":"2025-02-14T13:15:13Z","title":"A Robust Attack: Displacement Backdoor Attack","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-07T19:18:22.020589Z"},"links":{"cited_paper":"/paper/1811.03728","citing_paper":"/paper/2502.10490"},"observation_digest":"sha256:da9e931486d96945766ca5d7957295a5f8d0a8126e7800538d74f2dd6bb2761e","observation_id":"8236daba-b921-4b0d-ac2a-4ea64485d286","resolution":{"observed_at":"2026-08-07T19:18:22.020589Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2005.00060","last_updated":"2020-07-03T03:49:28Z","snapshot_observed_at":"2026-07-06T09:16:43.105433Z","submitted_at":"2020-04-30T19:12:50Z","title":"Bridging Mode Connectivity in Loss Landscapes and Adversarial Robustness","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2005.00060","snapshot_observed_at":"2026-08-07T19:18:22.024058Z","title":"Bridging mode connectivity in loss landscapes and adversarial robustness,","venue":null,"work_id":null,"year":2005},"citing_paper":{"arxiv_id":"2502.10490","last_updated":"2025-02-14T13:15:13Z","snapshot_observed_at":"2026-08-07T19:10:57.274990Z","submitted_at":"2025-02-14T13:15:13Z","title":"A Robust Attack: Displacement Backdoor Attack","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-07T19:18:22.024058Z"},"links":{"cited_paper":"/paper/2005.00060","citing_paper":"/paper/2502.10490"},"observation_digest":"sha256:a1090607adeeac043589041a27d8d8e93b942ab02bde3c126c01e0ab287a7c37","observation_id":"2047894b-5335-4b4d-94c4-8f169aa05ad8","resolution":{"observed_at":"2026-08-07T19:18:22.024058Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T19:18:22.204740Z","title":"Deepinspect: A black-box trojan detection and mitigation framework for deep neural networks.,","venue":null,"work_id":"b4939395-9834-4c8a-9453-ab743ea7c986","year":2019},"citing_paper":{"arxiv_id":"2502.10490","last_updated":"2025-02-14T13:15:13Z","snapshot_observed_at":"2026-08-07T19:10:57.274990Z","submitted_at":"2025-02-14T13:15:13Z","title":"A Robust Attack: Displacement Backdoor Attack","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-07T19:18:22.027625Z"},"links":{"citing_paper":"/paper/2502.10490"},"observation_digest":"sha256:675ecbde687027e179f395f932dd482ea7bf949b02739fda55d09faf8def48d5","observation_id":"c4bcc39b-8512-4f60-8769-9a8a68a6bd7a","resolution":{"observed_at":"2026-08-07T19:18:22.208213Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T19:18:22.194213Z","title":"Neural cleanse: Identifying and mitigating backdoor attacks in neural networks,","venue":null,"work_id":"750145ea-b1e1-4c16-bde1-86aac631a506","year":2019},"citing_paper":{"arxiv_id":"2502.10490","last_updated":"2025-02-14T13:15:13Z","snapshot_observed_at":"2026-08-07T19:10:57.274990Z","submitted_at":"2025-02-14T13:15:13Z","title":"A Robust Attack: Displacement Backdoor Attack","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-07T19:18:22.031084Z"},"links":{"citing_paper":"/paper/2502.10490"},"observation_digest":"sha256:5a9353c241c8c97e3e77c20243b3894d4bc8c3ec5a218bf76cee1d43a35fc376","observation_id":"60873667-f2d6-43ad-beb9-ead784420a0b","resolution":{"observed_at":"2026-08-07T19:18:22.198156Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T19:18:22.183078Z","title":"Defending neural backdoors via genera- tive distribution modeling,","venue":null,"work_id":"a0f3701e-73a5-4a5a-91d4-492b9c9f265a","year":2019},"citing_paper":{"arxiv_id":"2502.10490","last_updated":"2025-02-14T13:15:13Z","snapshot_observed_at":"2026-08-07T19:10:57.274990Z","submitted_at":"2025-02-14T13:15:13Z","title":"A Robust Attack: Displacement Backdoor Attack","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-07T19:18:22.034183Z"},"links":{"citing_paper":"/paper/2502.10490"},"observation_digest":"sha256:da49b4b6a61fd61751a323d897f83604c2eee10eb6222c57abb3eef425ee08f8","observation_id":"7a340985-d5fb-4515-8cb6-791bc9e4025a","resolution":{"observed_at":"2026-08-07T19:18:22.187369Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T19:18:22.172604Z","title":"Gangsweep: Sweep out neural backdoors by gan,","venue":null,"work_id":"b0f2586e-9fbe-4ef5-b994-c21dfdea388c","year":2020},"citing_paper":{"arxiv_id":"2502.10490","last_updated":"2025-02-14T13:15:13Z","snapshot_observed_at":"2026-08-07T19:10:57.274990Z","submitted_at":"2025-02-14T13:15:13Z","title":"A Robust Attack: Displacement Backdoor Attack","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-07T19:18:22.038522Z"},"links":{"citing_paper":"/paper/2502.10490"},"observation_digest":"sha256:3dfe440425f1171ef7c5f4326b43f5bc068358b4d014d3bc74283b85808054d4","observation_id":"a9bc4efe-d224-4859-937a-bf1cb32c8dee","resolution":{"observed_at":"2026-08-07T19:18:22.176657Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T19:18:22.161906Z","title":"Practical detection of trojan neural networks: Data-limited and data-free cases,","venue":null,"work_id":"e4789349-60f2-4a38-b161-45bca6bb8087","year":2020},"citing_paper":{"arxiv_id":"2502.10490","last_updated":"2025-02-14T13:15:13Z","snapshot_observed_at":"2026-08-07T19:10:57.274990Z","submitted_at":"2025-02-14T13:15:13Z","title":"A Robust Attack: Displacement Backdoor Attack","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-07T19:18:22.042145Z"},"links":{"citing_paper":"/paper/2502.10490"},"observation_digest":"sha256:18f796a61f05839ac58c7a85fed409b47d4d39f369a7f661fb66f261fa09305a","observation_id":"4a792ede-5d55-4826-8218-4c9abbbd50ec","resolution":{"observed_at":"2026-08-07T19:18:22.166060Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2502.10490","last_updated":"2025-02-14T13:15:13Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-07T19:10:57.274990Z","submitted_at":"2025-02-14T13:15:13Z","title":"A Robust Attack: Displacement Backdoor Attack"},"reference_resolution":{"displayed":36,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":10,"verified_exact":1,"verified_fuzzy":25},"total_outbound_references":36},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"thesis":"As of 9 August 2026, this Paper Citation Record lists 36 of 36 outbound references and 0 inbound Pith citation observations for arXiv:2502.10490."}