{"as_of":"2026-08-22T00:04:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:d38a990e9a313340e02f77ecefb3290caab31c3b788e025765e057572fadd411","coverage":[{"denominator":47,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":47,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-16T05:34:48.157090Z","state":"measured"},{"denominator":47,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":47,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-21T06:32:19.484+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2504.21054/citation-record","integrity":"/paper/2504.21054/integrity","json":"/paper/2504.21054/citation-record.json","paper":"/paper/2504.21054"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T05:34:48.817308Z","title":null,"venue":null,"work_id":"7410be03-14a5-4ae2-b45e-a1facc2267f6","year":null},"citing_paper":{"arxiv_id":"2504.21054","last_updated":"2025-08-05T01:09:16Z","snapshot_observed_at":"2026-08-21T18:26:36.373321Z","submitted_at":"2025-04-29T05:49:42Z","title":"FFCBA: Feature-based Full-target Clean-label Backdoor Attacks","version":2},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-16T05:34:47.951856Z"},"links":{"citing_paper":"/paper/2504.21054"},"observation_digest":"sha256:a7c13dde6686895bea511e1076fbdaf32c22c27f51e3e46baa77d10adaa5f5fe","observation_id":"3f53026b-dbc4-43cf-ae70-7f19583cb96b","resolution":{"observed_at":"2026-08-16T05:34:48.821704Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1811.03728","last_updated":"2018-11-09T01:08:00Z","snapshot_observed_at":"2026-08-16T05:42:20.700873Z","submitted_at":"2018-11-09T01:08:00Z","title":"Detecting Backdoor Attacks on Deep Neural Networks by Activation Clustering","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1811.03728","snapshot_observed_at":"2026-08-16T05:34:47.961677Z","title":null,"venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2504.21054","last_updated":"2025-08-05T01:09:16Z","snapshot_observed_at":"2026-08-21T18:26:36.373321Z","submitted_at":"2025-04-29T05:49:42Z","title":"FFCBA: Feature-based Full-target Clean-label Backdoor Attacks","version":2},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-16T05:34:47.961677Z"},"links":{"cited_paper":"/paper/1811.03728","citing_paper":"/paper/2504.21054"},"observation_digest":"sha256:e09e852392fb3e3a8f3dafd3c82f6772242adebb458443e43f3cdf18c8159b17","observation_id":"49963389-d6a1-4faf-bea7-372c2a878ca4","resolution":{"observed_at":"2026-08-16T05:34:47.961677Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T05:34:48.789738Z","title":null,"venue":null,"work_id":"ee1e66e9-3723-4cf4-82fc-e30cfad0f649","year":2019},"citing_paper":{"arxiv_id":"2504.21054","last_updated":"2025-08-05T01:09:16Z","snapshot_observed_at":"2026-08-21T18:26:36.373321Z","submitted_at":"2025-04-29T05:49:42Z","title":"FFCBA: Feature-based Full-target Clean-label Backdoor Attacks","version":2},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-16T05:34:47.967094Z"},"links":{"citing_paper":"/paper/2504.21054"},"observation_digest":"sha256:d92e2dc792be024a46fd2d726aef072ba7e5059999fc63ee65e59201391aa011","observation_id":"c2fac7ac-a3cb-4d75-b364-70769c23b819","resolution":{"observed_at":"2026-08-16T05:34:48.794255Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1712.05526","last_updated":"2017-12-15T04:26:26Z","snapshot_observed_at":"2026-07-06T06:14:30.795326Z","submitted_at":"2017-12-15T04:26:26Z","title":"Targeted Backdoor Attacks on Deep Learning Systems Using Data Poisoning","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1712.05526","snapshot_observed_at":"2026-08-16T05:34:47.971682Z","title":null,"venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2504.21054","last_updated":"2025-08-05T01:09:16Z","snapshot_observed_at":"2026-08-21T18:26:36.373321Z","submitted_at":"2025-04-29T05:49:42Z","title":"FFCBA: Feature-based Full-target Clean-label Backdoor Attacks","version":2},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-16T05:34:47.971682Z"},"links":{"cited_paper":"/paper/1712.05526","citing_paper":"/paper/2504.21054"},"observation_digest":"sha256:ab72897a87569557386ec2441fc5301650188c1180f63ae1ec1336b15e07f3f2","observation_id":"7356b53e-3c06-4068-b6a4-77920384a7b2","resolution":{"observed_at":"2026-08-16T05:34:47.971682Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T05:34:48.776197Z","title":null,"venue":null,"work_id":"379a3251-035b-433e-8c65-355477938d39","year":2021},"citing_paper":{"arxiv_id":"2504.21054","last_updated":"2025-08-05T01:09:16Z","snapshot_observed_at":"2026-08-21T18:26:36.373321Z","submitted_at":"2025-04-29T05:49:42Z","title":"FFCBA: Feature-based Full-target Clean-label Backdoor Attacks","version":2},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-16T05:34:47.976683Z"},"links":{"citing_paper":"/paper/2504.21054"},"observation_digest":"sha256:dd6f4d19af445c3c7a9bdf0ed2dbb866b700b52a874998361664117ce76e1c3b","observation_id":"9e7820de-ac40-459f-ab18-6f139c0c078c","resolution":{"observed_at":"2026-08-16T05:34:48.780442Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T05:34:48.762139Z","title":null,"venue":null,"work_id":"c14ef0d6-855d-443e-82ae-4b878a58c40a","year":2022},"citing_paper":{"arxiv_id":"2504.21054","last_updated":"2025-08-05T01:09:16Z","snapshot_observed_at":"2026-08-21T18:26:36.373321Z","submitted_at":"2025-04-29T05:49:42Z","title":"FFCBA: Feature-based Full-target Clean-label Backdoor Attacks","version":2},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-16T05:34:47.981091Z"},"links":{"citing_paper":"/paper/2504.21054"},"observation_digest":"sha256:a56e9c67e056534ed863be649ff2d53004cc612ab92fda1ef0af38207bf21dce","observation_id":"1aa5c8a3-a349-44a8-ba44-6c333ad9bc4b","resolution":{"observed_at":"2026-08-16T05:34:48.766518Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T05:34:48.747719Z","title":null,"venue":null,"work_id":"1195132c-9765-4852-9fa1-72a5a90bf35a","year":2022},"citing_paper":{"arxiv_id":"2504.21054","last_updated":"2025-08-05T01:09:16Z","snapshot_observed_at":"2026-08-21T18:26:36.373321Z","submitted_at":"2025-04-29T05:49:42Z","title":"FFCBA: Feature-based Full-target Clean-label Backdoor Attacks","version":2},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-16T05:34:47.985682Z"},"links":{"citing_paper":"/paper/2504.21054"},"observation_digest":"sha256:1d46b09d494e99e1eb0991fd6e3cbc6c9e0ce4af251ec710192c7c1781aa1012","observation_id":"7ca98b1e-b462-4dd6-9601-b6db2a420796","resolution":{"observed_at":"2026-08-16T05:34:48.752272Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T05:34:48.733496Z","title":null,"venue":null,"work_id":"15cafbe8-d501-4d2d-93de-ee61333e1304","year":2024},"citing_paper":{"arxiv_id":"2504.21054","last_updated":"2025-08-05T01:09:16Z","snapshot_observed_at":"2026-08-21T18:26:36.373321Z","submitted_at":"2025-04-29T05:49:42Z","title":"FFCBA: Feature-based Full-target Clean-label Backdoor Attacks","version":2},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-16T05:34:47.990691Z"},"links":{"citing_paper":"/paper/2504.21054"},"observation_digest":"sha256:e792c688d83aa35a836e7325226b08ce740b91718021bb82c3154e1b500af92d","observation_id":"1ea27f00-c905-4ffe-bf0c-66f9ea0ae30e","resolution":{"observed_at":"2026-08-16T05:34:48.738355Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T05:34:48.719402Z","title":null,"venue":null,"work_id":"e1d8c864-4a20-493b-9cd4-bd333ab82684","year":null},"citing_paper":{"arxiv_id":"2504.21054","last_updated":"2025-08-05T01:09:16Z","snapshot_observed_at":"2026-08-21T18:26:36.373321Z","submitted_at":"2025-04-29T05:49:42Z","title":"FFCBA: Feature-based Full-target Clean-label Backdoor Attacks","version":2},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-16T05:34:47.995096Z"},"links":{"citing_paper":"/paper/2504.21054"},"observation_digest":"sha256:012455208dddad69e41af54076a32a53c48465af59c1bae8ec994130469c39ba","observation_id":"2216c644-556f-4901-935b-32215786cfc4","resolution":{"observed_at":"2026-08-16T05:34:48.724041Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T05:34:48.689416Z","title":null,"venue":null,"work_id":"62ad5565-4b83-4c0b-9342-8ed355d2b485","year":2019},"citing_paper":{"arxiv_id":"2504.21054","last_updated":"2025-08-05T01:09:16Z","snapshot_observed_at":"2026-08-21T18:26:36.373321Z","submitted_at":"2025-04-29T05:49:42Z","title":"FFCBA: Feature-based Full-target Clean-label Backdoor Attacks","version":2},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-16T05:34:48.003895Z"},"links":{"citing_paper":"/paper/2504.21054"},"observation_digest":"sha256:af146ffa60148b18af412087024014f847294c163011ade6ff95e066efc362db","observation_id":"263356bf-7f2b-4ba6-bc21-b4f303770dc8","resolution":{"observed_at":"2026-08-16T05:34:48.693714Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T05:34:48.674868Z","title":null,"venue":null,"work_id":"1608bacf-65bd-4504-a3a2-0e5181519cd0","year":2019},"citing_paper":{"arxiv_id":"2504.21054","last_updated":"2025-08-05T01:09:16Z","snapshot_observed_at":"2026-08-21T18:26:36.373321Z","submitted_at":"2025-04-29T05:49:42Z","title":"FFCBA: Feature-based Full-target Clean-label Backdoor Attacks","version":2},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-16T05:34:48.008203Z"},"links":{"citing_paper":"/paper/2504.21054"},"observation_digest":"sha256:92b5ff5c73d97553b23f4158fb2053138f563d6ae8aedffce746cbf683fd1c9f","observation_id":"c8a641c1-61cf-4cdb-a92e-f9ab0f09c8c6","resolution":{"observed_at":"2026-08-16T05:34:48.679668Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T05:34:48.660534Z","title":null,"venue":null,"work_id":"070da07e-69b8-4b2d-9ccc-92a19b681c1f","year":2024},"citing_paper":{"arxiv_id":"2504.21054","last_updated":"2025-08-05T01:09:16Z","snapshot_observed_at":"2026-08-21T18:26:36.373321Z","submitted_at":"2025-04-29T05:49:42Z","title":"FFCBA: Feature-based Full-target Clean-label Backdoor Attacks","version":2},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-16T05:34:48.012624Z"},"links":{"citing_paper":"/paper/2504.21054"},"observation_digest":"sha256:0e8d93db6e2fdefca769da7aa364a696a1aee972bd3011d1c849edb76d06ba75","observation_id":"b002323b-4801-4d21-9f11-0f8db59603bc","resolution":{"observed_at":"2026-08-16T05:34:48.664895Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T05:34:48.645815Z","title":null,"venue":null,"work_id":"29ab8dd3-bb95-4bf6-ad43-77554666879f","year":2022},"citing_paper":{"arxiv_id":"2504.21054","last_updated":"2025-08-05T01:09:16Z","snapshot_observed_at":"2026-08-21T18:26:36.373321Z","submitted_at":"2025-04-29T05:49:42Z","title":"FFCBA: Feature-based Full-target Clean-label Backdoor Attacks","version":2},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-16T05:34:48.016893Z"},"links":{"citing_paper":"/paper/2504.21054"},"observation_digest":"sha256:faaad2602b8a4d7137714515be94e3e5d970a50abedb30f2aa422a93fc884a55","observation_id":"b99f9256-bdd4-4f68-83b2-f8a0c97417ab","resolution":{"observed_at":"2026-08-16T05:34:48.650624Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T05:34:48.631439Z","title":null,"venue":null,"work_id":"00a398b8-b944-4c6c-8aa4-8732be8e54da","year":2023},"citing_paper":{"arxiv_id":"2504.21054","last_updated":"2025-08-05T01:09:16Z","snapshot_observed_at":"2026-08-21T18:26:36.373321Z","submitted_at":"2025-04-29T05:49:42Z","title":"FFCBA: Feature-based Full-target Clean-label Backdoor Attacks","version":2},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-16T05:34:48.021490Z"},"links":{"citing_paper":"/paper/2504.21054"},"observation_digest":"sha256:7781e238fb6e1b3d24b444aa3792f78ce440bbb78ba464fb1948d4daea8dca35","observation_id":"003d424a-4bd1-4aaf-8728-b608001de72e","resolution":{"observed_at":"2026-08-16T05:34:48.635973Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T05:34:48.025795Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2504.21054","last_updated":"2025-08-05T01:09:16Z","snapshot_observed_at":"2026-08-21T18:26:36.373321Z","submitted_at":"2025-04-29T05:49:42Z","title":"FFCBA: Feature-based Full-target Clean-label Backdoor Attacks","version":2},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-16T05:34:48.025795Z"},"links":{"citing_paper":"/paper/2504.21054"},"observation_digest":"sha256:5257d508becff531910e4a1d4ee2240ebd2ef7740d915675ee6e89b1be58abc7","observation_id":"2f8c2d4a-f0b9-4aa6-913b-e211bc05ee31","resolution":{"observed_at":"2026-08-16T05:34:48.025795Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T05:34:48.608427Z","title":null,"venue":null,"work_id":"74c56e6c-4d64-4f49-943b-75e19195796d","year":2024},"citing_paper":{"arxiv_id":"2504.21054","last_updated":"2025-08-05T01:09:16Z","snapshot_observed_at":"2026-08-21T18:26:36.373321Z","submitted_at":"2025-04-29T05:49:42Z","title":"FFCBA: Feature-based Full-target Clean-label Backdoor Attacks","version":2},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-16T05:34:48.034770Z"},"links":{"citing_paper":"/paper/2504.21054"},"observation_digest":"sha256:9e33d06f1344a57bcf2a132533eaa1803a2493be378fcaf0fea1c769511f3b89","observation_id":"46f8ee41-95c1-4ff2-9e30-6d9e71baaf41","resolution":{"observed_at":"2026-08-16T05:34:48.612718Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T05:34:48.595271Z","title":null,"venue":null,"work_id":"f8a0c8cc-0782-4996-af00-da0dfd0fc5a8","year":2018},"citing_paper":{"arxiv_id":"2504.21054","last_updated":"2025-08-05T01:09:16Z","snapshot_observed_at":"2026-08-21T18:26:36.373321Z","submitted_at":"2025-04-29T05:49:42Z","title":"FFCBA: Feature-based Full-target Clean-label Backdoor Attacks","version":2},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-16T05:34:48.038964Z"},"links":{"citing_paper":"/paper/2504.21054"},"observation_digest":"sha256:fb993b811506cdbc7f4a7b971c6dfa70c711cf7ca8acfe4597189ff4a8486744","observation_id":"30de6a14-ead3-4ea2-a3de-a484bfec142d","resolution":{"observed_at":"2026-08-16T05:34:48.599460Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2405.09786","last_updated":"2024-06-02T15:06:02Z","snapshot_observed_at":"2026-08-21T18:26:14.916944Z","submitted_at":"2024-05-16T03:19:52Z","title":"IBD-PSC: Input-level Backdoor Detection via Parameter-oriented Scaling Consistency","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.09786","snapshot_observed_at":"2026-08-16T05:34:48.030225Z","title":"arXiv preprint arXiv:2405.09786 (2024)","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2504.21054","last_updated":"2025-08-05T01:09:16Z","snapshot_observed_at":"2026-08-21T18:26:36.373321Z","submitted_at":"2025-04-29T05:49:42Z","title":"FFCBA: Feature-based Full-target Clean-label Backdoor Attacks","version":2},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-16T05:34:48.030225Z"},"links":{"cited_paper":"/paper/2405.09786","citing_paper":"/paper/2504.21054"},"observation_digest":"sha256:db479c80f5d3753438aa9a6bc92229d2fe7765b017139bcda540b179a6dad3a2","observation_id":"9ef4219d-7e45-45ae-b48f-153c975cb96e","resolution":{"observed_at":"2026-08-16T05:34:48.030225Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T05:34:48.568372Z","title":null,"venue":null,"work_id":"4b67f81c-1c9d-4e3b-9d42-5f7250991a98","year":2021},"citing_paper":{"arxiv_id":"2504.21054","last_updated":"2025-08-05T01:09:16Z","snapshot_observed_at":"2026-08-21T18:26:36.373321Z","submitted_at":"2025-04-29T05:49:42Z","title":"FFCBA: Feature-based Full-target Clean-label Backdoor Attacks","version":2},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-16T05:34:48.047445Z"},"links":{"citing_paper":"/paper/2504.21054"},"observation_digest":"sha256:36bdcd8da5a2d8ec58ff85a824efac6701a257c5e16d897ce01b8fc6f43a5950","observation_id":"5b00687a-8ab3-4b70-9ab1-600c98c9c924","resolution":{"observed_at":"2026-08-16T05:34:48.572767Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T05:34:48.554799Z","title":null,"venue":null,"work_id":"5b61c1b5-d56f-43a5-9b87-50defc1bc535","year":2018},"citing_paper":{"arxiv_id":"2504.21054","last_updated":"2025-08-05T01:09:16Z","snapshot_observed_at":"2026-08-21T18:26:36.373321Z","submitted_at":"2025-04-29T05:49:42Z","title":"FFCBA: Feature-based Full-target Clean-label Backdoor Attacks","version":2},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-16T05:34:48.051777Z"},"links":{"citing_paper":"/paper/2504.21054"},"observation_digest":"sha256:e7e03c919fd5c2d1520fef3ba7effee39ed346a17d14826b78dc027df517ef9c","observation_id":"965ca67d-af21-4cc4-adff-13458156aef7","resolution":{"observed_at":"2026-08-16T05:34:48.559193Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T05:34:48.582055Z","title":null,"venue":null,"work_id":"48f2c9b4-07bd-43a6-89eb-9c177b0267fd","year":2021},"citing_paper":{"arxiv_id":"2504.21054","last_updated":"2025-08-05T01:09:16Z","snapshot_observed_at":"2026-08-21T18:26:36.373321Z","submitted_at":"2025-04-29T05:49:42Z","title":"FFCBA: Feature-based Full-target Clean-label Backdoor Attacks","version":2},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-16T05:34:48.043175Z"},"links":{"citing_paper":"/paper/2504.21054"},"observation_digest":"sha256:e3d0b907a4eb0b207123cb3cc96d0f32117fb3766f41ee35a955142ae8036d26","observation_id":"fa8b916e-311b-4f1c-9b5e-de46036fdf68","resolution":{"observed_at":"2026-08-16T05:34:48.586473Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T05:34:48.528037Z","title":null,"venue":null,"work_id":"58a87804-55c8-498f-8e7b-f1ca5781d41f","year":2020},"citing_paper":{"arxiv_id":"2504.21054","last_updated":"2025-08-05T01:09:16Z","snapshot_observed_at":"2026-08-21T18:26:36.373321Z","submitted_at":"2025-04-29T05:49:42Z","title":"FFCBA: Feature-based Full-target Clean-label Backdoor Attacks","version":2},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-16T05:34:48.060749Z"},"links":{"citing_paper":"/paper/2504.21054"},"observation_digest":"sha256:b635c8c6a0192e6799e8377d5f1afb5ca429133c0e1a3530fe94cc70095511b2","observation_id":"f5df5186-6226-4e21-8a48-2bd2957e4cf7","resolution":{"observed_at":"2026-08-16T05:34:48.532315Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T05:34:48.513941Z","title":null,"venue":null,"work_id":"54071747-8eeb-4d20-b442-a7649554c5dd","year":2020},"citing_paper":{"arxiv_id":"2504.21054","last_updated":"2025-08-05T01:09:16Z","snapshot_observed_at":"2026-08-21T18:26:36.373321Z","submitted_at":"2025-04-29T05:49:42Z","title":"FFCBA: Feature-based Full-target Clean-label Backdoor Attacks","version":2},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-16T05:34:48.065008Z"},"links":{"citing_paper":"/paper/2504.21054"},"observation_digest":"sha256:72dd4a764d3a07da8ff1f49f86ef292dea656174b05b94f85111577ad3b8f147","observation_id":"80b76920-4175-497f-ae2e-fe88fa0373a1","resolution":{"observed_at":"2026-08-16T05:34:48.518603Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T05:34:48.541742Z","title":null,"venue":null,"work_id":"f10ec54e-251a-4374-8f1c-4fc6342488a2","year":2018},"citing_paper":{"arxiv_id":"2504.21054","last_updated":"2025-08-05T01:09:16Z","snapshot_observed_at":"2026-08-21T18:26:36.373321Z","submitted_at":"2025-04-29T05:49:42Z","title":"FFCBA: Feature-based Full-target Clean-label Backdoor Attacks","version":2},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-16T05:34:48.056419Z"},"links":{"citing_paper":"/paper/2504.21054"},"observation_digest":"sha256:fdac3d016adb2a3c1838d2e4645b95f598866941c6eea06b5caeeb16ea8f0966","observation_id":"7161863c-673e-4aae-80bd-a0862c75940e","resolution":{"observed_at":"2026-08-16T05:34:48.546046Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T05:34:48.486005Z","title":null,"venue":null,"work_id":"b7ae4042-0c7b-4071-b0c5-a954548ffb1f","year":2021},"citing_paper":{"arxiv_id":"2504.21054","last_updated":"2025-08-05T01:09:16Z","snapshot_observed_at":"2026-08-21T18:26:36.373321Z","submitted_at":"2025-04-29T05:49:42Z","title":"FFCBA: Feature-based Full-target Clean-label Backdoor Attacks","version":2},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-16T05:34:48.073969Z"},"links":{"citing_paper":"/paper/2504.21054"},"observation_digest":"sha256:32df223b0f7bf44f3d103f9e88b13bb2f09e5c8778b42d55bfe731b928dd9e1d","observation_id":"b03182d3-9d67-440d-98f9-9b93597404d3","resolution":{"observed_at":"2026-08-16T05:34:48.490404Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T05:34:48.471926Z","title":null,"venue":null,"work_id":"3c002058-ae6d-4470-a671-59cde159bd58","year":2022},"citing_paper":{"arxiv_id":"2504.21054","last_updated":"2025-08-05T01:09:16Z","snapshot_observed_at":"2026-08-21T18:26:36.373321Z","submitted_at":"2025-04-29T05:49:42Z","title":"FFCBA: Feature-based Full-target Clean-label Backdoor Attacks","version":2},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-16T05:34:48.078168Z"},"links":{"citing_paper":"/paper/2504.21054"},"observation_digest":"sha256:264c9104ac46517bee6cc6ae48335604aa067c4e0214cc9e230b80ad8b1d0378","observation_id":"1c62d58a-ea15-402b-8cfd-33b075b116c7","resolution":{"observed_at":"2026-08-16T05:34:48.476292Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T05:34:48.499888Z","title":null,"venue":null,"work_id":"5ae8620b-a528-44dc-905a-a4e65cff4f30","year":2021},"citing_paper":{"arxiv_id":"2504.21054","last_updated":"2025-08-05T01:09:16Z","snapshot_observed_at":"2026-08-21T18:26:36.373321Z","submitted_at":"2025-04-29T05:49:42Z","title":"FFCBA: Feature-based Full-target Clean-label Backdoor Attacks","version":2},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-16T05:34:48.069370Z"},"links":{"citing_paper":"/paper/2504.21054"},"observation_digest":"sha256:fdf4c9953af436550a29e3557c54846c75e5f741ede02ac848c9cc38fdce24c0","observation_id":"25de819e-eeac-46e6-bdf1-0641997e1c08","resolution":{"observed_at":"2026-08-16T05:34:48.504483Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T05:34:48.441367Z","title":null,"venue":null,"work_id":"f641706c-2919-488b-90fc-f49431b3b3d4","year":2017},"citing_paper":{"arxiv_id":"2504.21054","last_updated":"2025-08-05T01:09:16Z","snapshot_observed_at":"2026-08-21T18:26:36.373321Z","submitted_at":"2025-04-29T05:49:42Z","title":"FFCBA: Feature-based Full-target Clean-label Backdoor Attacks","version":2},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-16T05:34:48.086350Z"},"links":{"citing_paper":"/paper/2504.21054"},"observation_digest":"sha256:9cb9e236e3007c2332ecbb304fb28a51409321372c8422730d013bd9fe13fc5d","observation_id":"9f5b99df-0490-49bf-8396-360ae8db9a9f","resolution":{"observed_at":"2026-08-16T05:34:48.445757Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T05:34:48.427435Z","title":null,"venue":null,"work_id":"8eaf0fbb-2fde-4434-8d76-4bbd0966a504","year":2018},"citing_paper":{"arxiv_id":"2504.21054","last_updated":"2025-08-05T01:09:16Z","snapshot_observed_at":"2026-08-21T18:26:36.373321Z","submitted_at":"2025-04-29T05:49:42Z","title":"FFCBA: Feature-based Full-target Clean-label Backdoor Attacks","version":2},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-16T05:34:48.090453Z"},"links":{"citing_paper":"/paper/2504.21054"},"observation_digest":"sha256:126e5be6647c00669f0b4dba0f2771171db185934a51f37099e018be011bbf95","observation_id":"0a4bbce0-26b8-4c6e-a5f9-8e20c287b2cc","resolution":{"observed_at":"2026-08-16T05:34:48.431762Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T05:34:48.456041Z","title":null,"venue":null,"work_id":"9564da83-af41-46cb-9a1b-b424e00ec58a","year":2024},"citing_paper":{"arxiv_id":"2504.21054","last_updated":"2025-08-05T01:09:16Z","snapshot_observed_at":"2026-08-21T18:26:36.373321Z","submitted_at":"2025-04-29T05:49:42Z","title":"FFCBA: Feature-based Full-target Clean-label Backdoor Attacks","version":2},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-16T05:34:48.082191Z"},"links":{"citing_paper":"/paper/2504.21054"},"observation_digest":"sha256:1a445be3388c6d2615cff014cfedea0adb50a4af173d9c57bd4d4cc68f76a456","observation_id":"37ecdc0c-3e66-4e50-a9ff-2c1b72f24a59","resolution":{"observed_at":"2026-08-16T05:34:48.461658Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1912.02771","last_updated":"2019-12-06T23:16:45Z","snapshot_observed_at":"2026-08-21T01:12:38.607259Z","submitted_at":"2019-12-05T18:05:59Z","title":"Label-Consistent Backdoor Attacks","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1912.02771","snapshot_observed_at":"2026-08-16T05:34:48.098876Z","title":null,"venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2504.21054","last_updated":"2025-08-05T01:09:16Z","snapshot_observed_at":"2026-08-21T18:26:36.373321Z","submitted_at":"2025-04-29T05:49:42Z","title":"FFCBA: Feature-based Full-target Clean-label Backdoor Attacks","version":2},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-16T05:34:48.098876Z"},"links":{"cited_paper":"/paper/1912.02771","citing_paper":"/paper/2504.21054"},"observation_digest":"sha256:2c0b0334deeff2cb2338cd6a1ecdd9327f22d54adf4b046b54d7f5cb143025fb","observation_id":"f5d11615-098e-463d-9813-bd6adcc2b6b6","resolution":{"observed_at":"2026-08-16T05:34:48.098876Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T05:34:48.398853Z","title":null,"venue":null,"work_id":"b4b8b5ed-786b-48ff-9f59-71e82e034b71","year":2019},"citing_paper":{"arxiv_id":"2504.21054","last_updated":"2025-08-05T01:09:16Z","snapshot_observed_at":"2026-08-21T18:26:36.373321Z","submitted_at":"2025-04-29T05:49:42Z","title":"FFCBA: Feature-based Full-target Clean-label Backdoor Attacks","version":2},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-16T05:34:48.103490Z"},"links":{"citing_paper":"/paper/2504.21054"},"observation_digest":"sha256:a8ca62f81efb460a6b95a78b19266e5f2fb33fd2d19b46211afcd176e802ea2b","observation_id":"94a83cef-faa2-4b9c-bb77-457591a6843b","resolution":{"observed_at":"2026-08-16T05:34:48.403247Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T05:34:48.412832Z","title":null,"venue":null,"work_id":"925362a9-7025-4c83-9e3b-6b61f1c8ac87","year":2023},"citing_paper":{"arxiv_id":"2504.21054","last_updated":"2025-08-05T01:09:16Z","snapshot_observed_at":"2026-08-21T18:26:36.373321Z","submitted_at":"2025-04-29T05:49:42Z","title":"FFCBA: Feature-based Full-target Clean-label Backdoor Attacks","version":2},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-16T05:34:48.094736Z"},"links":{"citing_paper":"/paper/2504.21054"},"observation_digest":"sha256:8d4f61a36ff9caa4a9dc812658e0d49a6a14c69d5459382b53690bbe057d3549","observation_id":"cb129bdd-ef42-4d0b-b6df-796217be16c6","resolution":{"observed_at":"2026-08-16T05:34:48.417434Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T05:34:48.112143Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2504.21054","last_updated":"2025-08-05T01:09:16Z","snapshot_observed_at":"2026-08-21T18:26:36.373321Z","submitted_at":"2025-04-29T05:49:42Z","title":"FFCBA: Feature-based Full-target Clean-label Backdoor Attacks","version":2},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-16T05:34:48.112143Z"},"links":{"citing_paper":"/paper/2504.21054"},"observation_digest":"sha256:4097e691d3d9778a86a9f856255495020d5af4826b69cd20a5dd73cf9c9bc29e","observation_id":"00711b17-febc-43f8-97d5-7a54197d2794","resolution":{"observed_at":"2026-08-16T05:34:48.112143Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T05:34:48.348461Z","title":null,"venue":null,"work_id":"80435fed-ce99-4c42-b844-e7c7577458f3","year":2020},"citing_paper":{"arxiv_id":"2504.21054","last_updated":"2025-08-05T01:09:16Z","snapshot_observed_at":"2026-08-21T18:26:36.373321Z","submitted_at":"2025-04-29T05:49:42Z","title":"FFCBA: Feature-based Full-target Clean-label Backdoor Attacks","version":2},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-16T05:34:48.121501Z"},"links":{"citing_paper":"/paper/2504.21054"},"observation_digest":"sha256:fcf43de6581a8694ab3a1d63df6870f01589c8845e37a453cbfd106969b61d29","observation_id":"441ab129-c5f8-47d1-9c24-6fa03318f64c","resolution":{"observed_at":"2026-08-16T05:34:48.352967Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T05:34:48.384753Z","title":null,"venue":null,"work_id":"b9c74eec-f2b3-4e7f-991d-8e6268a9a566","year":2024},"citing_paper":{"arxiv_id":"2504.21054","last_updated":"2025-08-05T01:09:16Z","snapshot_observed_at":"2026-08-21T18:26:36.373321Z","submitted_at":"2025-04-29T05:49:42Z","title":"FFCBA: Feature-based Full-target Clean-label Backdoor Attacks","version":2},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-16T05:34:48.107969Z"},"links":{"citing_paper":"/paper/2504.21054"},"observation_digest":"sha256:c2c3f3e7caafce63becf166d332425968b4def735ab9a6b6f39e335f354a6f85","observation_id":"362b1fb2-e9ca-4944-9b7a-9f5cd1c24de6","resolution":{"observed_at":"2026-08-16T05:34:48.389277Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T05:34:48.320647Z","title":null,"venue":null,"work_id":"8429d325-62cb-4f62-93f2-9f1636ac4025","year":2024},"citing_paper":{"arxiv_id":"2504.21054","last_updated":"2025-08-05T01:09:16Z","snapshot_observed_at":"2026-08-21T18:26:36.373321Z","submitted_at":"2025-04-29T05:49:42Z","title":"FFCBA: Feature-based Full-target Clean-label Backdoor Attacks","version":2},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-16T05:34:48.130258Z"},"links":{"citing_paper":"/paper/2504.21054"},"observation_digest":"sha256:8b31a50a33c46b5b122f09f2e800fb2e3cce18585f49a17fab2a50a3ad4fd3eb","observation_id":"9b5a6243-180b-47db-afc3-1c82ee0cbd23","resolution":{"observed_at":"2026-08-16T05:34:48.325129Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T05:34:48.134623Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2504.21054","last_updated":"2025-08-05T01:09:16Z","snapshot_observed_at":"2026-08-21T18:26:36.373321Z","submitted_at":"2025-04-29T05:49:42Z","title":"FFCBA: Feature-based Full-target Clean-label Backdoor Attacks","version":2},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-16T05:34:48.134623Z"},"links":{"citing_paper":"/paper/2504.21054"},"observation_digest":"sha256:8f47a7fca58fa1c227bb4d5b659102fee6b12a30a77c37fab5d9fc47c84bc6f4","observation_id":"3df01cd2-cd9d-4ec3-afba-44d02f67778c","resolution":{"observed_at":"2026-08-16T05:34:48.134623Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T05:34:48.283128Z","title":null,"venue":null,"work_id":"9ff7756c-66f9-4d21-824c-541238ec0129","year":2021},"citing_paper":{"arxiv_id":"2504.21054","last_updated":"2025-08-05T01:09:16Z","snapshot_observed_at":"2026-08-21T18:26:36.373321Z","submitted_at":"2025-04-29T05:49:42Z","title":"FFCBA: Feature-based Full-target Clean-label Backdoor Attacks","version":2},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-16T05:34:48.143886Z"},"links":{"citing_paper":"/paper/2504.21054"},"observation_digest":"sha256:bf156d674b361bb1926ccbf18c1dc631f66079e29a6a50cfbe0759aa8ac75421","observation_id":"90fe010e-46b3-4de3-8e53-b1d991125259","resolution":{"observed_at":"2026-08-16T05:34:48.287830Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T05:34:48.334550Z","title":null,"venue":null,"work_id":"1a83eb14-4fec-4bad-92ef-f22770b7fe1c","year":2024},"citing_paper":{"arxiv_id":"2504.21054","last_updated":"2025-08-05T01:09:16Z","snapshot_observed_at":"2026-08-21T18:26:36.373321Z","submitted_at":"2025-04-29T05:49:42Z","title":"FFCBA: Feature-based Full-target Clean-label Backdoor Attacks","version":2},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-16T05:34:48.125851Z"},"links":{"citing_paper":"/paper/2504.21054"},"observation_digest":"sha256:02b86efc59ebdd7fea0cabb680d9433fef45e6723633fd9787b688b7eef4b1c1","observation_id":"cf55b0ec-ac16-4086-896f-311adb82fc85","resolution":{"observed_at":"2026-08-16T05:34:48.338707Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T05:34:48.243290Z","title":null,"venue":null,"work_id":"be6def4b-2d6d-42ee-a5f6-7c223203908e","year":2023},"citing_paper":{"arxiv_id":"2504.21054","last_updated":"2025-08-05T01:09:16Z","snapshot_observed_at":"2026-08-21T18:26:36.373321Z","submitted_at":"2025-04-29T05:49:42Z","title":"FFCBA: Feature-based Full-target Clean-label Backdoor Attacks","version":2},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-16T05:34:48.157090Z"},"links":{"citing_paper":"/paper/2504.21054"},"observation_digest":"sha256:5810e9ad6aea513061d5240d737b9a6a56e63216a8f749c71c35cff68b8043f6","observation_id":"9cbd74c2-17c6-4729-a8a1-d540d3d0cf9f","resolution":{"observed_at":"2026-08-16T05:34:48.248859Z","resolver_source":"raw_fallback","status":"malformed_identifier"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T05:34:48.148186Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2504.21054","last_updated":"2025-08-05T01:09:16Z","snapshot_observed_at":"2026-08-21T18:26:36.373321Z","submitted_at":"2025-04-29T05:49:42Z","title":"FFCBA: Feature-based Full-target Clean-label Backdoor Attacks","version":2},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-16T05:34:48.148186Z"},"links":{"citing_paper":"/paper/2504.21054"},"observation_digest":"sha256:d90ba4ac9ebe840668d7746cf4a7f79e72882d33d700f8dacdf1c5f1c86e1fd5","observation_id":"afa08f64-a905-4e86-b07a-9a7d6ebd38e5","resolution":{"observed_at":"2026-08-16T05:34:48.148186Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T05:34:48.258875Z","title":"In Proceedings of the ACM International Conference on Multimedia","venue":null,"work_id":"0f5b4fc3-74c9-4d26-93ef-21216eadc0ca","year":null},"citing_paper":{"arxiv_id":"2504.21054","last_updated":"2025-08-05T01:09:16Z","snapshot_observed_at":"2026-08-21T18:26:36.373321Z","submitted_at":"2025-04-29T05:49:42Z","title":"FFCBA: Feature-based Full-target Clean-label Backdoor Attacks","version":2},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-16T05:34:48.152559Z"},"links":{"citing_paper":"/paper/2504.21054"},"observation_digest":"sha256:41b2163d6bf4cfc1616b8ea4d9b4c52047da70471610258526441266b9fab5b5","observation_id":"67c04d7c-4576-42ef-b119-8a464b469660","resolution":{"observed_at":"2026-08-16T05:34:48.264331Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T05:34:48.803226Z","title":"In Proceedings of the International Conference on Learning Representations","venue":null,"work_id":"0b479e75-e29a-4c12-ab44-b346cc88208a","year":null},"citing_paper":{"arxiv_id":"2504.21054","last_updated":"2025-08-05T01:09:16Z","snapshot_observed_at":"2026-08-21T18:26:36.373321Z","submitted_at":"2025-04-29T05:49:42Z","title":"FFCBA: Feature-based Full-target Clean-label Backdoor Attacks","version":2},"reference_index":2021,"source":"pdf_text","source_observed_at":"2026-08-16T05:34:47.957132Z"},"links":{"citing_paper":"/paper/2504.21054"},"observation_digest":"sha256:d6d2e366bac9de3c7cd1bfe22f00f316da2bcfe6fe0c21050b39de11b807fb4a","observation_id":"bb6d940d-d49f-4362-86c4-013f1ace0e91","resolution":{"observed_at":"2026-08-16T05:34:48.807951Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T05:34:48.362148Z","title":"In Proceedings of the European Conference on Computer Vision","venue":null,"work_id":"7ed29c7b-c50b-414f-8cdb-2d3d5ddd32d2","year":null},"citing_paper":{"arxiv_id":"2504.21054","last_updated":"2025-08-05T01:09:16Z","snapshot_observed_at":"2026-08-21T18:26:36.373321Z","submitted_at":"2025-04-29T05:49:42Z","title":"FFCBA: Feature-based Full-target Clean-label Backdoor Attacks","version":2},"reference_index":2022,"source":"pdf_text","source_observed_at":"2026-08-16T05:34:48.117134Z"},"links":{"citing_paper":"/paper/2504.21054"},"observation_digest":"sha256:831e6d96611676a9816fb2f6e4798d6417f0127e0e44701de4f2e449478e2271","observation_id":"104552bb-9de9-4c1c-bc2f-1fedb08f7360","resolution":{"observed_at":"2026-08-16T05:34:48.366612Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T05:34:48.297377Z","title":"In Proceedings of the ACM SIGSAC Conference on Computer and Communications Security","venue":null,"work_id":"5f21e70b-c121-4aae-9e4c-36d910b3456d","year":null},"citing_paper":{"arxiv_id":"2504.21054","last_updated":"2025-08-05T01:09:16Z","snapshot_observed_at":"2026-08-21T18:26:36.373321Z","submitted_at":"2025-04-29T05:49:42Z","title":"FFCBA: Feature-based Full-target Clean-label Backdoor Attacks","version":2},"reference_index":2023,"source":"pdf_text","source_observed_at":"2026-08-16T05:34:48.139006Z"},"links":{"citing_paper":"/paper/2504.21054"},"observation_digest":"sha256:6108fa2208d3909f717037547cd4e17be162e2a5ad289908b50d4a0f06eba598","observation_id":"4bc0e134-6c21-48de-a2ec-dcfa0371370f","resolution":{"observed_at":"2026-08-16T05:34:48.301881Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T05:34:48.704474Z","title":"In Proceedings of the International Conference on Machine Learning","venue":null,"work_id":"5e965741-285c-4ee2-9c17-43c1d5526447","year":null},"citing_paper":{"arxiv_id":"2504.21054","last_updated":"2025-08-05T01:09:16Z","snapshot_observed_at":"2026-08-21T18:26:36.373321Z","submitted_at":"2025-04-29T05:49:42Z","title":"FFCBA: Feature-based Full-target Clean-label Backdoor Attacks","version":2},"reference_index":2024,"source":"pdf_text","source_observed_at":"2026-08-16T05:34:47.999310Z"},"links":{"citing_paper":"/paper/2504.21054"},"observation_digest":"sha256:d0a010ec60d6a0e0c2450bb200296caf74e060213bc338a1bb2c6c8fe2781404","observation_id":"68e32cbb-7d83-4ff5-b765-6c1608560d0f","resolution":{"observed_at":"2026-08-16T05:34:48.709143Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2504.21054","last_updated":"2025-08-05T01:09:16Z","latest_version":2,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-21T18:26:36.373321Z","submitted_at":"2025-04-29T05:49:42Z","title":"FFCBA: Feature-based Full-target Clean-label Backdoor Attacks"},"reference_resolution":{"displayed":47,"state_counts":{"malformed_identifier":1,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":41,"verified_exact":0,"verified_fuzzy":5},"total_outbound_references":47},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"thesis":"As of 22 August 2026, this Paper Citation Record lists 47 of 47 outbound references and 0 inbound Pith citation observations for arXiv:2504.21054."}