{"as_of":"2026-08-20T00:15:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:f7a5dd28ad921cbf113f9c6c87e67ecf6f4eb8a4ccfda4b98c361c4c0c580c55","coverage":[{"denominator":63,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":63,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-15T22:26:18.041439Z","state":"measured"},{"denominator":66,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":66,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-19T06:32:44.657259+00:00","state":"measured"},{"denominator":3,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":3,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-15T16:15:52.239451Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-06-28T17:22:24.338572Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2505.08807","last_updated":"2025-05-12T02:04:57Z","snapshot_observed_at":"2026-08-15T22:20:56.452628Z","submitted_at":"2025-05-12T02:04:57Z","title":"Security of Internet of Agents: Attacks and Countermeasures","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.08807","snapshot_observed_at":"2026-08-15T16:15:52.239451Z","title":"Security of Internet of Agents: Attacks and Countermeasures,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2509.07131","last_updated":"2025-09-08T18:32:15Z","snapshot_observed_at":"2026-08-16T13:12:39.569402Z","submitted_at":"2025-09-08T18:32:15Z","title":"SoK: Security and Privacy of AI Agents for Blockchain","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-15T16:15:52.239451Z"},"links":{"cited_paper":"/paper/2505.08807","citing_paper":"/paper/2509.07131"},"observation_digest":"sha256:8860f0162ccec3bff9e2c1fcf1445281d5cfe5829b110cdec9afe974964e5be0","observation_id":"0ddd93f8-fd7b-4ef8-9891-6a16dcd8ebc4","resolution":{"observed_at":"2026-08-15T16:15:52.239451Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2505.08807","last_updated":"2025-05-12T02:04:57Z","snapshot_observed_at":"2026-08-15T22:20:56.452628Z","submitted_at":"2025-05-12T02:04:57Z","title":"Security of Internet of Agents: Attacks and Countermeasures","version":1},"cited_work":{"arxiv_id":"2505.08807","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2505.08807","snapshot_observed_at":"2026-06-28T17:22:24.338572Z","title":"Security of Internet of Agents: Attacks and Countermeasures,","venue":null,"work_id":"f1fb1f8c-e79a-4aaa-b618-30804c706434","year":2025},"citing_paper":{"arxiv_id":"2606.00962","last_updated":"2026-05-31T02:34:38Z","snapshot_observed_at":"2026-08-12T03:23:19.261748Z","submitted_at":"2026-05-31T02:34:38Z","title":"SS-ZKR: Spatial-Semantic Zero-Knowledge Routing for Privacy-Preserving Multi-Agent Collaboration","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-06-28T17:22:09.864332Z"},"links":{"cited_paper":"/paper/2505.08807","citing_paper":"/paper/2606.00962"},"observation_digest":"sha256:d17cbc9ccc7eb3983cdb0f57d756c709c779076ef9a4f9ee2e629b85171b8de0","observation_id":"c8fc4eb5-7821-44f7-84fa-30581e25873e","resolution":{"observed_at":"2026-06-28T17:22:24.340278Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2505.08807","last_updated":"2025-05-12T02:04:57Z","snapshot_observed_at":"2026-08-15T22:20:56.452628Z","submitted_at":"2025-05-12T02:04:57Z","title":"Security of Internet of Agents: Attacks and Countermeasures","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.08807","snapshot_observed_at":"2026-08-15T14:21:42.578344Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-19T18:52:42.862550Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":131,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:42.578344Z"},"links":{"cited_paper":"/paper/2505.08807","citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:dd7e34b6b97498ee20ade6b4ca8a9c177b6767d0b3082efb1b0c8d54c1fa2d53","observation_id":"bfd6ee91-3c22-42d3-b694-2d11617c768d","resolution":{"observed_at":"2026-08-15T14:21:42.578344Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2505.08807/citation-record","integrity":"/paper/2505.08807/integrity","json":"/paper/2505.08807/citation-record.json","paper":"/paper/2505.08807"},"outbound":[{"citation":{"cited_paper":{"arxiv_id":"2409.14457","last_updated":"2025-06-02T03:11:00Z","snapshot_observed_at":"2026-08-17T14:44:30.859874Z","submitted_at":"2024-09-22T14:09:49Z","title":"Large Model Based Agents: State-of-the-Art, Cooperation Paradigms, Security and Privacy, and Future Trends","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2409.14457","snapshot_observed_at":"2026-08-15T22:26:17.713566Z","title":"Large model agents: State-of-the-art, cooperation paradigms, security and privacy, and future trends,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.08807","last_updated":"2025-05-12T02:04:57Z","snapshot_observed_at":"2026-08-15T22:20:56.452628Z","submitted_at":"2025-05-12T02:04:57Z","title":"Security of Internet of Agents: Attacks and Countermeasures","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-15T22:26:17.713566Z"},"links":{"cited_paper":"/paper/2409.14457","citing_paper":"/paper/2505.08807"},"observation_digest":"sha256:691c0676866a95fad4cc4d91dc63d8d734d411b002369de4793ac8a877938244","observation_id":"fdcd0258-b81c-46c3-b553-5c385a1edaca","resolution":{"observed_at":"2026-08-15T22:26:17.713566Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:26:19.407176Z","title":"See and think: Embodied agent in virtual environment,","venue":null,"work_id":"89cf1d6e-340b-4c17-a038-8bc272ff27f7","year":2024},"citing_paper":{"arxiv_id":"2505.08807","last_updated":"2025-05-12T02:04:57Z","snapshot_observed_at":"2026-08-15T22:20:56.452628Z","submitted_at":"2025-05-12T02:04:57Z","title":"Security of Internet of Agents: Attacks and Countermeasures","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-15T22:26:17.719319Z"},"links":{"citing_paper":"/paper/2505.08807"},"observation_digest":"sha256:d3e8785a221334b222a3c54c83db221f787f4f40d590a92e6066ff0eb30d20f3","observation_id":"e6047ec9-4b80-4493-8fc3-435a2a59c9c5","resolution":{"observed_at":"2026-08-15T22:26:19.412518Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:26:19.389514Z","title":"Intelligent agents in AI","venue":null,"work_id":"3f332063-b563-4554-9827-efb8582b4ab2","year":2023},"citing_paper":{"arxiv_id":"2505.08807","last_updated":"2025-05-12T02:04:57Z","snapshot_observed_at":"2026-08-15T22:20:56.452628Z","submitted_at":"2025-05-12T02:04:57Z","title":"Security of Internet of Agents: Attacks and Countermeasures","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-15T22:26:17.724647Z"},"links":{"citing_paper":"/paper/2505.08807"},"observation_digest":"sha256:d5cc825036e12a2fc6b28cad8f80f298f828baed55fcca91957516ae600a8f60","observation_id":"eb8190cb-6042-4bb1-89e1-9b114397634a","resolution":{"observed_at":"2026-08-15T22:26:19.395470Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:26:19.371673Z","title":"Internet of agents: Weaving a web of heterogeneous agents for collaborative intelligence,","venue":null,"work_id":"5a2da69c-476a-4780-ae06-ab046647b56b","year":2025},"citing_paper":{"arxiv_id":"2505.08807","last_updated":"2025-05-12T02:04:57Z","snapshot_observed_at":"2026-08-15T22:20:56.452628Z","submitted_at":"2025-05-12T02:04:57Z","title":"Security of Internet of Agents: Attacks and Countermeasures","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-15T22:26:17.729912Z"},"links":{"citing_paper":"/paper/2505.08807"},"observation_digest":"sha256:f051fb19e4d02856542963066a41c6729df0dd938e3a2058251cbe31b509dfce","observation_id":"ca0646e5-74d6-4d27-a303-5e669abe3330","resolution":{"observed_at":"2026-08-15T22:26:19.377651Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:26:19.354372Z","title":"DAWN: Designing distributed agents in a worldwide network,","venue":null,"work_id":"5073da0e-81dc-40eb-bbf4-8c8a10babec8","year":2024},"citing_paper":{"arxiv_id":"2505.08807","last_updated":"2025-05-12T02:04:57Z","snapshot_observed_at":"2026-08-15T22:20:56.452628Z","submitted_at":"2025-05-12T02:04:57Z","title":"Security of Internet of Agents: Attacks and Countermeasures","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-15T22:26:17.735157Z"},"links":{"citing_paper":"/paper/2505.08807"},"observation_digest":"sha256:92c6e24ac1e90527e2201fdc18c7400265d60a361fc536812f383101405b77aa","observation_id":"b89b53ed-2ffc-496b-8876-34b3f645c65e","resolution":{"observed_at":"2026-08-15T22:26:19.359573Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:26:19.336819Z","title":"Can i hear your face? pervasive attack on voice authentication systems with a single face image,","venue":null,"work_id":"d592e2ec-53a2-49e8-aa34-880190f37bb9","year":2024},"citing_paper":{"arxiv_id":"2505.08807","last_updated":"2025-05-12T02:04:57Z","snapshot_observed_at":"2026-08-15T22:20:56.452628Z","submitted_at":"2025-05-12T02:04:57Z","title":"Security of Internet of Agents: Attacks and Countermeasures","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-15T22:26:17.741216Z"},"links":{"citing_paper":"/paper/2505.08807"},"observation_digest":"sha256:7c62b27932786904ddbf55498ca7ef5ea0f223526d48c273dc42cdc69d2fafcd","observation_id":"605f3df0-2b98-466f-967a-1123a0d4a07c","resolution":{"observed_at":"2026-08-15T22:26:19.342576Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:26:19.318524Z","title":"CDA: Covert deception attacks in multi-agent resource scheduling,","venue":null,"work_id":"85fa3ee9-2d3b-4dd2-8b25-b0072478e3cd","year":2024},"citing_paper":{"arxiv_id":"2505.08807","last_updated":"2025-05-12T02:04:57Z","snapshot_observed_at":"2026-08-15T22:20:56.452628Z","submitted_at":"2025-05-12T02:04:57Z","title":"Security of Internet of Agents: Attacks and Countermeasures","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-15T22:26:17.746833Z"},"links":{"citing_paper":"/paper/2505.08807"},"observation_digest":"sha256:c055fb276e58610be42f23a24b7158410d1dd23a3f1b84f2f506e0e71d8c6549","observation_id":"e21d3643-2eef-41c6-a102-167d1c846cdf","resolution":{"observed_at":"2026-08-15T22:26:19.323504Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:26:19.301680Z","title":"Secret collusion among ai agents: Multi-agent deception via steganography,","venue":null,"work_id":"fa8905a2-6357-4d3f-9d6d-9201189d84cb","year":2024},"citing_paper":{"arxiv_id":"2505.08807","last_updated":"2025-05-12T02:04:57Z","snapshot_observed_at":"2026-08-15T22:20:56.452628Z","submitted_at":"2025-05-12T02:04:57Z","title":"Security of Internet of Agents: Attacks and Countermeasures","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-15T22:26:17.751298Z"},"links":{"citing_paper":"/paper/2505.08807"},"observation_digest":"sha256:7508daca7782c26c31a259921d278fe0a1d8c8cff54e3a2d0b5db544ef08605c","observation_id":"35ae1140-865e-4927-92a3-7218df527be7","resolution":{"observed_at":"2026-08-15T22:26:19.307522Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:26:17.756146Z","title":"Agents under siege: Breaking pragmatic multi-agent llm systems with optimized prompt attacks,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2505.08807","last_updated":"2025-05-12T02:04:57Z","snapshot_observed_at":"2026-08-15T22:20:56.452628Z","submitted_at":"2025-05-12T02:04:57Z","title":"Security of Internet of Agents: Attacks and Countermeasures","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-15T22:26:17.756146Z"},"links":{"citing_paper":"/paper/2505.08807"},"observation_digest":"sha256:9dca236f88c2d68f267b30fc46044d2679df1243f3601ace50734764e8b0e174","observation_id":"60b0b658-9c66-4207-b462-44a26c140756","resolution":{"observed_at":"2026-08-15T22:26:17.756146Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:26:19.282837Z","title":"Can we trust embodied agents? exploring backdoor attacks against embodied LLM-based decision-making systems,","venue":null,"work_id":"c7ecfe2a-10a5-44ac-b328-ba7f74149976","year":2025},"citing_paper":{"arxiv_id":"2505.08807","last_updated":"2025-05-12T02:04:57Z","snapshot_observed_at":"2026-08-15T22:20:56.452628Z","submitted_at":"2025-05-12T02:04:57Z","title":"Security of Internet of Agents: Attacks and Countermeasures","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-15T22:26:17.760612Z"},"links":{"citing_paper":"/paper/2505.08807"},"observation_digest":"sha256:cd77ba63f152b3e697221d1542d4b3819def48d1eddc933c255c30667bfa5a0b","observation_id":"b1f799a2-535c-40dc-b897-d29b15a124a0","resolution":{"observed_at":"2026-08-15T22:26:19.289073Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:26:19.266464Z","title":"How language model hallucinations can snowball,","venue":null,"work_id":"1add794d-6d97-4ae1-a5ac-44513e9ae009","year":2024},"citing_paper":{"arxiv_id":"2505.08807","last_updated":"2025-05-12T02:04:57Z","snapshot_observed_at":"2026-08-15T22:20:56.452628Z","submitted_at":"2025-05-12T02:04:57Z","title":"Security of Internet of Agents: Attacks and Countermeasures","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-15T22:26:17.765343Z"},"links":{"citing_paper":"/paper/2505.08807"},"observation_digest":"sha256:37d66a0fee5397f299a5df6d238e3f4468bdb4c497780500dbb9b3d0d222bb11","observation_id":"5212c142-8ed6-465d-9ce3-3d9b4d5da438","resolution":{"observed_at":"2026-08-15T22:26:19.271407Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:26:19.249935Z","title":"Security and privacy challenges of large language models: A survey,","venue":null,"work_id":"93187b1b-e835-485a-8add-8e10092cce06","year":2025},"citing_paper":{"arxiv_id":"2505.08807","last_updated":"2025-05-12T02:04:57Z","snapshot_observed_at":"2026-08-15T22:20:56.452628Z","submitted_at":"2025-05-12T02:04:57Z","title":"Security of Internet of Agents: Attacks and Countermeasures","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-15T22:26:17.770453Z"},"links":{"citing_paper":"/paper/2505.08807"},"observation_digest":"sha256:2aaa3b4b3728c054590e608b991cd0262bb3462f67e45287d7b3a6af7d658d1b","observation_id":"f2104dc9-1df2-4efa-a60e-a3fff15154d2","resolution":{"observed_at":"2026-08-15T22:26:19.255074Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:26:17.775080Z","title":"The emerged security and privacy of llm agent: A survey with case studies,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.08807","last_updated":"2025-05-12T02:04:57Z","snapshot_observed_at":"2026-08-15T22:20:56.452628Z","submitted_at":"2025-05-12T02:04:57Z","title":"Security of Internet of Agents: Attacks and Countermeasures","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-15T22:26:17.775080Z"},"links":{"citing_paper":"/paper/2505.08807"},"observation_digest":"sha256:a443b860d4eb30a46eca1d2087a1cfb7bbaa9ff3379762cb23b35eea67948c2e","observation_id":"5482bc2d-3de2-42ae-b4ff-c85ae4ec1821","resolution":{"observed_at":"2026-08-15T22:26:17.775080Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:26:17.779695Z","title":"Unique security and privacy threats of large language model: A comprehensive survey,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.08807","last_updated":"2025-05-12T02:04:57Z","snapshot_observed_at":"2026-08-15T22:20:56.452628Z","submitted_at":"2025-05-12T02:04:57Z","title":"Security of Internet of Agents: Attacks and Countermeasures","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-15T22:26:17.779695Z"},"links":{"citing_paper":"/paper/2505.08807"},"observation_digest":"sha256:f6ba67be8ce2082a62c4e16c5cfeba818b2775054411b60163063a9609f416ab","observation_id":"5b580b52-bdf1-4f7f-ad27-c08349aa4d42","resolution":{"observed_at":"2026-08-15T22:26:17.779695Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2411.09523","last_updated":"2024-11-14T15:40:04Z","snapshot_observed_at":"2026-08-17T21:48:32.577209Z","submitted_at":"2024-11-14T15:40:04Z","title":"Navigating the Risks: A Survey of Security, Privacy, and Ethics Threats in LLM-Based Agents","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2411.09523","snapshot_observed_at":"2026-08-15T22:26:17.785376Z","title":"Navigating the risks: A survey of security, privacy, and ethics threats in llm-based agents,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.08807","last_updated":"2025-05-12T02:04:57Z","snapshot_observed_at":"2026-08-15T22:20:56.452628Z","submitted_at":"2025-05-12T02:04:57Z","title":"Security of Internet of Agents: Attacks and Countermeasures","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-15T22:26:17.785376Z"},"links":{"cited_paper":"/paper/2411.09523","citing_paper":"/paper/2505.08807"},"observation_digest":"sha256:f5472fe9c093f521c212e2f86d3537d1c71786682bffcd4d8ea6900fddf3982d","observation_id":"5fa82a77-9301-4e6f-82ce-9943efec5e73","resolution":{"observed_at":"2026-08-15T22:26:17.785376Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2401.05459","last_updated":"2024-05-08T06:16:23Z","snapshot_observed_at":"2026-08-19T17:12:26.495549Z","submitted_at":"2024-01-10T09:25:45Z","title":"Personal LLM Agents: Insights and Survey about the Capability, Efficiency and Security","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2401.05459","snapshot_observed_at":"2026-08-15T22:26:17.790503Z","title":"Personal LLM agents: Insights and survey about the capability, efficiency and security,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.08807","last_updated":"2025-05-12T02:04:57Z","snapshot_observed_at":"2026-08-15T22:20:56.452628Z","submitted_at":"2025-05-12T02:04:57Z","title":"Security of Internet of Agents: Attacks and Countermeasures","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-15T22:26:17.790503Z"},"links":{"cited_paper":"/paper/2401.05459","citing_paper":"/paper/2505.08807"},"observation_digest":"sha256:2bc01ca297813d59943a7075d51827842df8821b45e8e5c1a83034a2f4743b64","observation_id":"d2232451-174e-43f6-b809-d88ecac6b2a8","resolution":{"observed_at":"2026-08-15T22:26:17.790503Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:26:17.795664Z","title":"Physical safety and cyber security analysis of multi-agent systems: A survey of recent advances,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2505.08807","last_updated":"2025-05-12T02:04:57Z","snapshot_observed_at":"2026-08-15T22:20:56.452628Z","submitted_at":"2025-05-12T02:04:57Z","title":"Security of Internet of Agents: Attacks and Countermeasures","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-15T22:26:17.795664Z"},"links":{"citing_paper":"/paper/2505.08807"},"observation_digest":"sha256:884369c32e094e25f8ab8f310ac65fea32e8e6d3959e76f0a4de339bee889d29","observation_id":"c6bc7041-b96a-4232-bc0f-7a0b3c4f3e9e","resolution":{"observed_at":"2026-08-15T22:26:17.795664Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:26:19.223066Z","title":"AI agents under threat: A survey of key security challenges and future pathways,","venue":null,"work_id":"127e7cd8-7fd7-45ef-a5dd-ddd4f3a787f9","year":2025},"citing_paper":{"arxiv_id":"2505.08807","last_updated":"2025-05-12T02:04:57Z","snapshot_observed_at":"2026-08-15T22:20:56.452628Z","submitted_at":"2025-05-12T02:04:57Z","title":"Security of Internet of Agents: Attacks and Countermeasures","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-15T22:26:17.799882Z"},"links":{"citing_paper":"/paper/2505.08807"},"observation_digest":"sha256:9e26ea34b69d7daee3273ca37da99519ca52454c93d2a83dd083379678c82da8","observation_id":"f0e1f332-6c00-4853-a0ba-47352aea79ca","resolution":{"observed_at":"2026-08-15T22:26:19.228177Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2504.15585","last_updated":"2025-06-09T02:36:20Z","snapshot_observed_at":"2026-08-17T21:55:02.668814Z","submitted_at":"2025-04-22T05:02:49Z","title":"A Comprehensive Survey in LLM(-Agent) Full Stack Safety: Data, Training and Deployment","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.15585","snapshot_observed_at":"2026-08-15T22:26:17.804206Z","title":"A comprehensive survey in LLM (- agent) full stack safety: Data, training and deployment,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2505.08807","last_updated":"2025-05-12T02:04:57Z","snapshot_observed_at":"2026-08-15T22:20:56.452628Z","submitted_at":"2025-05-12T02:04:57Z","title":"Security of Internet of Agents: Attacks and Countermeasures","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-15T22:26:17.804206Z"},"links":{"cited_paper":"/paper/2504.15585","citing_paper":"/paper/2505.08807"},"observation_digest":"sha256:8e7c8fb34bae986cbe4cd73e592d9e11387665b3dddbfa0728d5900d5dcf2613","observation_id":"bdd39ed5-f9f4-4d77-9fc2-698c8d02679e","resolution":{"observed_at":"2026-08-15T22:26:17.804206Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:26:19.205461Z","title":"From persona to personalization: A survey on role-playing language agents,","venue":null,"work_id":"7d01e492-13ab-49f1-ad6d-b86c7cb00dea","year":2024},"citing_paper":{"arxiv_id":"2505.08807","last_updated":"2025-05-12T02:04:57Z","snapshot_observed_at":"2026-08-15T22:20:56.452628Z","submitted_at":"2025-05-12T02:04:57Z","title":"Security of Internet of Agents: Attacks and Countermeasures","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-15T22:26:17.809062Z"},"links":{"citing_paper":"/paper/2505.08807"},"observation_digest":"sha256:197dbb7fe76095f7755668a8aa0565c140aa35e0442da60d547dc79f1c659c22","observation_id":"0579e6d4-a2de-4d40-9a49-761cbcd72e7a","resolution":{"observed_at":"2026-08-15T22:26:19.210691Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:26:19.187622Z","title":"Model context protocol (MCP)","venue":null,"work_id":"3d143600-ee35-40b3-85e0-d8bb4ea3cb7e","year":2024},"citing_paper":{"arxiv_id":"2505.08807","last_updated":"2025-05-12T02:04:57Z","snapshot_observed_at":"2026-08-15T22:20:56.452628Z","submitted_at":"2025-05-12T02:04:57Z","title":"Security of Internet of Agents: Attacks and Countermeasures","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-15T22:26:17.813577Z"},"links":{"citing_paper":"/paper/2505.08807"},"observation_digest":"sha256:0885595544b8a4e716a1d7cb24c58505473f45eca2856121ffdd22688b43c6ef","observation_id":"a2e5d861-9bf8-40c6-b7ea-83a3bb7fcf0a","resolution":{"observed_at":"2026-08-15T22:26:19.193205Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:26:19.172125Z","title":"Agent to agent protocol (A2A)","venue":null,"work_id":"f3c3df7c-2b2f-45d0-9b48-7a97e05e876f","year":null},"citing_paper":{"arxiv_id":"2505.08807","last_updated":"2025-05-12T02:04:57Z","snapshot_observed_at":"2026-08-15T22:20:56.452628Z","submitted_at":"2025-05-12T02:04:57Z","title":"Security of Internet of Agents: Attacks and Countermeasures","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-15T22:26:17.817988Z"},"links":{"citing_paper":"/paper/2505.08807"},"observation_digest":"sha256:059333bb32faf55a215a0d35198278d98b86e8c09ea732a4f2638ebcd86c481f","observation_id":"e7bbfd2c-af5c-46ca-8892-8aa2c10a6116","resolution":{"observed_at":"2026-08-15T22:26:19.177194Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:26:19.139108Z","title":"Agent network protocol (ANP)","venue":null,"work_id":"36b50c50-e318-4b0d-b72d-8b8f45367a98","year":null},"citing_paper":{"arxiv_id":"2505.08807","last_updated":"2025-05-12T02:04:57Z","snapshot_observed_at":"2026-08-15T22:20:56.452628Z","submitted_at":"2025-05-12T02:04:57Z","title":"Security of Internet of Agents: Attacks and Countermeasures","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-15T22:26:17.827033Z"},"links":{"citing_paper":"/paper/2505.08807"},"observation_digest":"sha256:5c62edf58ab357ac3a35923b042b18936596a48398e8f5805721a873d438bbe0","observation_id":"5d7f05b4-5a7b-4b3f-ad39-5133cf14c3a4","resolution":{"observed_at":"2026-08-15T22:26:19.144114Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:26:19.111043Z","title":"Agora protocol","venue":null,"work_id":"0e2362f5-2d94-4389-91df-89aebd55e95d","year":null},"citing_paper":{"arxiv_id":"2505.08807","last_updated":"2025-05-12T02:04:57Z","snapshot_observed_at":"2026-08-15T22:20:56.452628Z","submitted_at":"2025-05-12T02:04:57Z","title":"Security of Internet of Agents: Attacks and Countermeasures","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-15T22:26:17.836046Z"},"links":{"citing_paper":"/paper/2505.08807"},"observation_digest":"sha256:2e735416af7ef6dea1e80821139d77b7cb0a1024c6e242cfb8b183f762dd9515","observation_id":"4ef1aefd-1b4e-4be9-b9c5-3d1ac1b71854","resolution":{"observed_at":"2026-08-15T22:26:19.116155Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2503.23278","last_updated":"2025-10-07T07:13:32Z","snapshot_observed_at":"2026-08-14T03:34:08.418318Z","submitted_at":"2025-03-30T01:58:22Z","title":"Model Context Protocol (MCP): Landscape, Security Threats, and Future Research Directions","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2503.23278","snapshot_observed_at":"2026-08-15T22:26:17.845834Z","title":"Model context protocol (MCP): Landscape, security threats, and future research directions,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2505.08807","last_updated":"2025-05-12T02:04:57Z","snapshot_observed_at":"2026-08-15T22:20:56.452628Z","submitted_at":"2025-05-12T02:04:57Z","title":"Security of Internet of Agents: Attacks and Countermeasures","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-15T22:26:17.845834Z"},"links":{"cited_paper":"/paper/2503.23278","citing_paper":"/paper/2505.08807"},"observation_digest":"sha256:26a66227e9b86c9c1624b2b4ec75a421006bc43390248b670d722dab88efd513","observation_id":"2ef51d28-cd8d-431a-875a-1859ec4f4ce2","resolution":{"observed_at":"2026-08-15T22:26:17.845834Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:26:19.093937Z","title":"Whole-process privacy-preserving and sybil-resilient consensus for multiagent net- works,","venue":null,"work_id":"4433cbbc-9e32-4329-bd6e-e4af06217a07","year":2024},"citing_paper":{"arxiv_id":"2505.08807","last_updated":"2025-05-12T02:04:57Z","snapshot_observed_at":"2026-08-15T22:20:56.452628Z","submitted_at":"2025-05-12T02:04:57Z","title":"Security of Internet of Agents: Attacks and Countermeasures","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-15T22:26:17.851445Z"},"links":{"citing_paper":"/paper/2505.08807"},"observation_digest":"sha256:1c5a14c0eff36576390d5cfb266cb794eab323dc6475f18fa40acb82af7c5b72","observation_id":"9b80e39f-3099-4858-a67c-cc943155d359","resolution":{"observed_at":"2026-08-15T22:26:19.099678Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:26:19.155978Z","title":"26, 2025","venue":null,"work_id":"c727e37e-7489-4e96-bb97-8d3720a7ccbf","year":2025},"citing_paper":{"arxiv_id":"2505.08807","last_updated":"2025-05-12T02:04:57Z","snapshot_observed_at":"2026-08-15T22:20:56.452628Z","submitted_at":"2025-05-12T02:04:57Z","title":"Security of Internet of Agents: Attacks and Countermeasures","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-15T22:26:17.840804Z"},"links":{"citing_paper":"/paper/2505.08807"},"observation_digest":"sha256:b583bb37e94b4c47b014a5018208127cf51020129ce490bd31ff90453a9b9a29","observation_id":"879e4a39-6a50-4d9e-af96-52bdf92607f3","resolution":{"observed_at":"2026-08-15T22:26:19.161151Z","resolver_source":"raw_fallback","status":"parse_uncertain"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:26:19.050551Z","title":"A survey on access control in the age of Internet of things,","venue":null,"work_id":"1c269e28-0bbf-4a70-a9bf-388422ca133c","year":2020},"citing_paper":{"arxiv_id":"2505.08807","last_updated":"2025-05-12T02:04:57Z","snapshot_observed_at":"2026-08-15T22:20:56.452628Z","submitted_at":"2025-05-12T02:04:57Z","title":"Security of Internet of Agents: Attacks and Countermeasures","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-15T22:26:17.865352Z"},"links":{"citing_paper":"/paper/2505.08807"},"observation_digest":"sha256:93e0f159245e1c70da8339777698497ba7716072729d0fc75240eb9839573bd4","observation_id":"bafa9c4c-4ea6-4315-82da-d092237bb03e","resolution":{"observed_at":"2026-08-15T22:26:19.054947Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:26:17.870495Z","title":"A survey on decentralized identifiers and verifi- able credentials,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2505.08807","last_updated":"2025-05-12T02:04:57Z","snapshot_observed_at":"2026-08-15T22:20:56.452628Z","submitted_at":"2025-05-12T02:04:57Z","title":"Security of Internet of Agents: Attacks and Countermeasures","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-15T22:26:17.870495Z"},"links":{"citing_paper":"/paper/2505.08807"},"observation_digest":"sha256:451be45f14478baf9ffe16f0151247f967f80a5b91ae751a3ee9623d439656ae","observation_id":"2d3d8c94-a882-4405-8747-7a6e67cb9455","resolution":{"observed_at":"2026-08-15T22:26:17.870495Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:26:19.079384Z","title":"MCP security notification: Tool poisoning attacks","venue":null,"work_id":"7a4aa529-e3f5-4be4-b3d7-ba8888c3979b","year":null},"citing_paper":{"arxiv_id":"2505.08807","last_updated":"2025-05-12T02:04:57Z","snapshot_observed_at":"2026-08-15T22:20:56.452628Z","submitted_at":"2025-05-12T02:04:57Z","title":"Security of Internet of Agents: Attacks and Countermeasures","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-15T22:26:17.855871Z"},"links":{"citing_paper":"/paper/2505.08807"},"observation_digest":"sha256:197917509e49e31e36b8f169cac9683433e29f4269209b62f37dc5720819b1a3","observation_id":"dc95d2ef-9aaa-456a-9517-d4a2a0c67acf","resolution":{"observed_at":"2026-08-15T22:26:19.084156Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:26:19.064457Z","title":null,"venue":null,"work_id":"ffacb779-6c34-44fc-b986-36da1b27bfd4","year":2025},"citing_paper":{"arxiv_id":"2505.08807","last_updated":"2025-05-12T02:04:57Z","snapshot_observed_at":"2026-08-15T22:20:56.452628Z","submitted_at":"2025-05-12T02:04:57Z","title":"Security of Internet of Agents: Attacks and Countermeasures","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-15T22:26:17.860670Z"},"links":{"citing_paper":"/paper/2505.08807"},"observation_digest":"sha256:892a6728a151ced58a57b526311bf8c4f8719cc8702e1e73eba4679dd9e02ea0","observation_id":"8bcdd4f2-006e-42cc-993d-795a5d11f9d0","resolution":{"observed_at":"2026-08-15T22:26:19.069015Z","resolver_source":"raw_fallback","status":"parse_uncertain"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2407.20859","last_updated":"2024-07-30T14:35:31Z","snapshot_observed_at":"2026-08-16T16:13:43.780714Z","submitted_at":"2024-07-30T14:35:31Z","title":"Breaking Agents: Compromising Autonomous LLM Agents Through Malfunction Amplification","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.20859","snapshot_observed_at":"2026-08-15T22:26:17.886848Z","title":"Breaking agents: Compromising autonomous LLM agents through malfunction amplification,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.08807","last_updated":"2025-05-12T02:04:57Z","snapshot_observed_at":"2026-08-15T22:20:56.452628Z","submitted_at":"2025-05-12T02:04:57Z","title":"Security of Internet of Agents: Attacks and Countermeasures","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-15T22:26:17.886848Z"},"links":{"cited_paper":"/paper/2407.20859","citing_paper":"/paper/2505.08807"},"observation_digest":"sha256:8d2dd36f259b4a0a7bd45a5ca815cbd6ca1647d8bdc33b16baf40064964cb48a","observation_id":"5a18874b-17a0-4660-9e1b-f330c1608202","resolution":{"observed_at":"2026-08-15T22:26:17.886848Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2408.08902","last_updated":"2024-08-12T11:33:45Z","snapshot_observed_at":"2026-08-19T19:09:23.846764Z","submitted_at":"2024-08-12T11:33:45Z","title":"Audit-LLM: Multi-Agent Collaboration for Log-based Insider Threat Detection","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2408.08902","snapshot_observed_at":"2026-08-15T22:26:17.892533Z","title":"Audit-LLM: Multi-agent collaboration for log-based insider threat detection,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.08807","last_updated":"2025-05-12T02:04:57Z","snapshot_observed_at":"2026-08-15T22:20:56.452628Z","submitted_at":"2025-05-12T02:04:57Z","title":"Security of Internet of Agents: Attacks and Countermeasures","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-15T22:26:17.892533Z"},"links":{"cited_paper":"/paper/2408.08902","citing_paper":"/paper/2505.08807"},"observation_digest":"sha256:8e68d346cb949dd33124223129a3650d412bc70cab897e07bee57734fe6419be","observation_id":"cbe5afb5-4d86-4e18-8a8d-5bbc872b76fb","resolution":{"observed_at":"2026-08-15T22:26:17.892533Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:26:19.035973Z","title":"PoisonedRAG: Knowledge poisoning attacks to retrieval-augmented generation of large language models,","venue":null,"work_id":"98463744-5217-447d-b97b-b1041c751d27","year":2024},"citing_paper":{"arxiv_id":"2505.08807","last_updated":"2025-05-12T02:04:57Z","snapshot_observed_at":"2026-08-15T22:20:56.452628Z","submitted_at":"2025-05-12T02:04:57Z","title":"Security of Internet of Agents: Attacks and Countermeasures","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-15T22:26:17.876090Z"},"links":{"citing_paper":"/paper/2505.08807"},"observation_digest":"sha256:7959348d3d21ca0e843e8ea41f610897cc603b8d35552545ba6d81fc89a2f934","observation_id":"6c4b4a79-0c9e-40f9-8582-e43084061d8d","resolution":{"observed_at":"2026-08-15T22:26:19.041050Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:26:19.020350Z","title":"Pandora: Detailed LLM jailbreaking via collaborated phishing agents with decomposed reasoning,","venue":null,"work_id":"a5941e21-1181-4fc4-9a65-49b30f7ffb26","year":2024},"citing_paper":{"arxiv_id":"2505.08807","last_updated":"2025-05-12T02:04:57Z","snapshot_observed_at":"2026-08-15T22:20:56.452628Z","submitted_at":"2025-05-12T02:04:57Z","title":"Security of Internet of Agents: Attacks and Countermeasures","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-15T22:26:17.880828Z"},"links":{"citing_paper":"/paper/2505.08807"},"observation_digest":"sha256:f45d663484d15428cf2c235b320797ac85ab3f1f4b441277d377d827078a5d01","observation_id":"48d0f7fe-7cd6-45f5-aa48-38cdb677140b","resolution":{"observed_at":"2026-08-15T22:26:19.025855Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:26:18.988662Z","title":"Retrieval-augmented generation for knowledge-intensive NLP tasks,","venue":null,"work_id":"962184bd-a0fd-4cae-ae19-de5a5d61717c","year":2020},"citing_paper":{"arxiv_id":"2505.08807","last_updated":"2025-05-12T02:04:57Z","snapshot_observed_at":"2026-08-15T22:20:56.452628Z","submitted_at":"2025-05-12T02:04:57Z","title":"Security of Internet of Agents: Attacks and Countermeasures","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-15T22:26:17.907789Z"},"links":{"citing_paper":"/paper/2505.08807"},"observation_digest":"sha256:162489a113283c870719baec260440b450e2ae6d29f434fc21c1a70aebf0c551","observation_id":"62e9033f-82e0-4294-8c4a-2f996e01ca30","resolution":{"observed_at":"2026-08-15T22:26:18.994319Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.14262","last_updated":"2024-10-25T17:24:16Z","snapshot_observed_at":"2026-08-16T13:08:07.367237Z","submitted_at":"2024-10-18T08:18:18Z","title":"Good Parenting is all you need -- Multi-agentic LLM Hallucination Mitigation","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.14262","snapshot_observed_at":"2026-08-15T22:26:17.913599Z","title":"Good parenting is all you need–multi-agentic LLM hallucination mitigation,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.08807","last_updated":"2025-05-12T02:04:57Z","snapshot_observed_at":"2026-08-15T22:20:56.452628Z","submitted_at":"2025-05-12T02:04:57Z","title":"Security of Internet of Agents: Attacks and Countermeasures","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-15T22:26:17.913599Z"},"links":{"cited_paper":"/paper/2410.14262","citing_paper":"/paper/2505.08807"},"observation_digest":"sha256:28e906463190aad1d5a56b893a2d6d98592f09ff086e1de78f9b1bfdd89fd8dc","observation_id":"389a5b63-b2de-41ec-acef-35d4865c702d","resolution":{"observed_at":"2026-08-15T22:26:17.913599Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:26:19.004886Z","title":"GPTSwarm: Language agents as optimizable graphs,","venue":null,"work_id":"1c490e5e-f91f-4333-b07e-d225c5b2ca5d","year":2024},"citing_paper":{"arxiv_id":"2505.08807","last_updated":"2025-05-12T02:04:57Z","snapshot_observed_at":"2026-08-15T22:20:56.452628Z","submitted_at":"2025-05-12T02:04:57Z","title":"Security of Internet of Agents: Attacks and Countermeasures","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-15T22:26:17.897631Z"},"links":{"citing_paper":"/paper/2505.08807"},"observation_digest":"sha256:d5c697001aac9d25e4cb52a52062a3a63dfa4a1525b4ec17c3954b474ed8cc23","observation_id":"ec6ce106-de6e-41c4-a6ff-0da6e1a85a87","resolution":{"observed_at":"2026-08-15T22:26:19.009754Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2025.35600","doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:26:18.220005Z","title":"Exploring LLM- based multi-agent situation awareness for zero-trust space-air-ground integrated network,","venue":null,"work_id":"a8c662d5-ce8c-45a9-90ee-ed5cc3e7eea0","year":2025},"citing_paper":{"arxiv_id":"2505.08807","last_updated":"2025-05-12T02:04:57Z","snapshot_observed_at":"2026-08-15T22:20:56.452628Z","submitted_at":"2025-05-12T02:04:57Z","title":"Security of Internet of Agents: Attacks and Countermeasures","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-15T22:26:17.902601Z"},"links":{"citing_paper":"/paper/2505.08807"},"observation_digest":"sha256:cad6d74308361fea6be96c8fc3659f39c6e4ff1a57dc20b561ed4dfaaa5d536c","observation_id":"2cedc4e8-2523-4668-8f83-83bcacbdd3eb","resolution":{"observed_at":"2026-08-15T22:26:18.233573Z","resolver_source":"raw_fallback","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:26:18.957237Z","title":"Improving factuality and reasoning in language models through multiagent debate,","venue":null,"work_id":"7bdd33a2-1ba9-460c-8112-0fc219d63036","year":2023},"citing_paper":{"arxiv_id":"2505.08807","last_updated":"2025-05-12T02:04:57Z","snapshot_observed_at":"2026-08-15T22:20:56.452628Z","submitted_at":"2025-05-12T02:04:57Z","title":"Security of Internet of Agents: Attacks and Countermeasures","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-15T22:26:17.928474Z"},"links":{"citing_paper":"/paper/2505.08807"},"observation_digest":"sha256:3f0d3dfabc0396d7b884aa363ab260e2c93e667605bf8cc7335527735d90d972","observation_id":"0deec00e-62e6-47b3-b095-c6b7ddf7ac58","resolution":{"observed_at":"2026-08-15T22:26:18.962230Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2309.02705","last_updated":"2025-02-04T19:47:09Z","snapshot_observed_at":"2026-08-19T18:59:35.297879Z","submitted_at":"2023-09-06T04:37:20Z","title":"Certifying LLM Safety against Adversarial Prompting","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.02705","snapshot_observed_at":"2026-08-15T22:26:17.933498Z","title":"Certifying LLM safety against adversarial prompting,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.08807","last_updated":"2025-05-12T02:04:57Z","snapshot_observed_at":"2026-08-15T22:20:56.452628Z","submitted_at":"2025-05-12T02:04:57Z","title":"Security of Internet of Agents: Attacks and Countermeasures","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-15T22:26:17.933498Z"},"links":{"cited_paper":"/paper/2309.02705","citing_paper":"/paper/2505.08807"},"observation_digest":"sha256:382911600ab1a9799caffbadd0ca7904bf40031786d105c98abc109d7f5c7c44","observation_id":"5a7e5b90-202f-4a04-ab93-b32cd90ddba8","resolution":{"observed_at":"2026-08-15T22:26:17.933498Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:26:18.973013Z","title":"RARR: researching and revising what language models say, using language models,","venue":null,"work_id":"d1c1b27b-538b-423e-9d07-cd753413af6c","year":2023},"citing_paper":{"arxiv_id":"2505.08807","last_updated":"2025-05-12T02:04:57Z","snapshot_observed_at":"2026-08-15T22:20:56.452628Z","submitted_at":"2025-05-12T02:04:57Z","title":"Security of Internet of Agents: Attacks and Countermeasures","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-15T22:26:17.918496Z"},"links":{"citing_paper":"/paper/2505.08807"},"observation_digest":"sha256:16e14a8316615e3bb97b5ce134850dd96dc52dfa42e4fd734b2650ede9b377ac","observation_id":"af19cfd0-d43c-4c47-9c22-45d4ed71b376","resolution":{"observed_at":"2026-08-15T22:26:18.978149Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.09187","last_updated":"2025-05-29T03:09:05Z","snapshot_observed_at":"2026-07-06T18:30:23.849880Z","submitted_at":"2024-06-13T14:49:26Z","title":"GuardAgent: Safeguard LLM Agents by a Guard Agent via Knowledge-Enabled Reasoning","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.09187","snapshot_observed_at":"2026-08-15T22:26:17.922969Z","title":"GuardAgent: Safeguard LLM agent by a guard agent via knowledge-enabled reasoning,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.08807","last_updated":"2025-05-12T02:04:57Z","snapshot_observed_at":"2026-08-15T22:20:56.452628Z","submitted_at":"2025-05-12T02:04:57Z","title":"Security of Internet of Agents: Attacks and Countermeasures","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-15T22:26:17.922969Z"},"links":{"cited_paper":"/paper/2406.09187","citing_paper":"/paper/2505.08807"},"observation_digest":"sha256:8dca52eb2821a57939ef90e5692d5a2a264eedf49418eb7b1f61b0894e4e8b7a","observation_id":"fe73768b-7b05-4919-ad67-953023031a5e","resolution":{"observed_at":"2026-08-15T22:26:17.922969Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:26:18.904801Z","title":"ESP spoofing: Covert acoustic attack on mems gyroscopes in vehicles,","venue":null,"work_id":"f1be5c7c-dada-4fad-90f4-284e9b5a5356","year":2022},"citing_paper":{"arxiv_id":"2505.08807","last_updated":"2025-05-12T02:04:57Z","snapshot_observed_at":"2026-08-15T22:20:56.452628Z","submitted_at":"2025-05-12T02:04:57Z","title":"Security of Internet of Agents: Attacks and Countermeasures","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-15T22:26:17.950467Z"},"links":{"citing_paper":"/paper/2505.08807"},"observation_digest":"sha256:d61fc240a23516f288ae0b6b6b01443710f353bb9252f5a48b5df55e1d0fbea3","observation_id":"e1403131-e04f-48a7-ae4b-f2b049c2e325","resolution":{"observed_at":"2026-08-15T22:26:18.909753Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:26:18.887416Z","title":"MetaWave: Attacking mmwave sensing with meta-material-enhanced tags,","venue":null,"work_id":"1eb390ca-39a2-43d2-bd19-07c389d231e9","year":2023},"citing_paper":{"arxiv_id":"2505.08807","last_updated":"2025-05-12T02:04:57Z","snapshot_observed_at":"2026-08-15T22:20:56.452628Z","submitted_at":"2025-05-12T02:04:57Z","title":"Security of Internet of Agents: Attacks and Countermeasures","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-15T22:26:17.955426Z"},"links":{"citing_paper":"/paper/2505.08807"},"observation_digest":"sha256:09c70e631efa690bac583134ca2e396fe5f120e75e21fd8e9751fbc5cc088c3f","observation_id":"db3ede93-b22b-45f2-be74-be30320bf1b3","resolution":{"observed_at":"2026-08-15T22:26:18.892488Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:26:18.939217Z","title":"LLM self defense: By self examination, LLMs know they are being tricked,","venue":null,"work_id":"7528b0de-60e1-4e96-89ea-557827623f4c","year":2024},"citing_paper":{"arxiv_id":"2505.08807","last_updated":"2025-05-12T02:04:57Z","snapshot_observed_at":"2026-08-15T22:20:56.452628Z","submitted_at":"2025-05-12T02:04:57Z","title":"Security of Internet of Agents: Attacks and Countermeasures","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-15T22:26:17.940122Z"},"links":{"citing_paper":"/paper/2505.08807"},"observation_digest":"sha256:51426b67e38d1acf23bc19c208c5d4ee06a904201fd6ccbf6b220d2711318c4f","observation_id":"71936131-6c2b-4581-9c55-40b2a11a73f7","resolution":{"observed_at":"2026-08-15T22:26:18.945302Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:26:18.922715Z","title":"Rocking drones with intentional sound noise on gyroscopic sensors,","venue":null,"work_id":"ac826f01-ade4-4dd9-b3a1-6b34b8920df1","year":2015},"citing_paper":{"arxiv_id":"2505.08807","last_updated":"2025-05-12T02:04:57Z","snapshot_observed_at":"2026-08-15T22:20:56.452628Z","submitted_at":"2025-05-12T02:04:57Z","title":"Security of Internet of Agents: Attacks and Countermeasures","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-15T22:26:17.944732Z"},"links":{"citing_paper":"/paper/2505.08807"},"observation_digest":"sha256:5c8b7dc59dabf160d47b8d41ffec21bef7c6336cc13f746139448b785484e5ee","observation_id":"dc0895b7-7a6e-4a2b-b9e2-28aa0c54ddc7","resolution":{"observed_at":"2026-08-15T22:26:18.928563Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:26:18.843065Z","title":"Compromising LLM driven embodied agents with contextual backdoor attacks,","venue":null,"work_id":"c02480cb-d21f-4ac2-b398-8552e36391db","year":2025},"citing_paper":{"arxiv_id":"2505.08807","last_updated":"2025-05-12T02:04:57Z","snapshot_observed_at":"2026-08-15T22:20:56.452628Z","submitted_at":"2025-05-12T02:04:57Z","title":"Security of Internet of Agents: Attacks and Countermeasures","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-15T22:26:17.972208Z"},"links":{"citing_paper":"/paper/2505.08807"},"observation_digest":"sha256:8b7fc8f39919baca42c0e5f855320a36458b2202e08d027933f18f0c2c36fb8a","observation_id":"653c121c-7825-479b-a254-edfcd3de8612","resolution":{"observed_at":"2026-08-15T22:26:18.847823Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:26:18.826419Z","title":"BadRobot: Jailbreaking embodied LLMs in the physical world,","venue":null,"work_id":"eb6f810a-32a9-4d70-84bc-6e93b8f40986","year":2025},"citing_paper":{"arxiv_id":"2505.08807","last_updated":"2025-05-12T02:04:57Z","snapshot_observed_at":"2026-08-15T22:20:56.452628Z","submitted_at":"2025-05-12T02:04:57Z","title":"Security of Internet of Agents: Attacks and Countermeasures","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-15T22:26:17.977149Z"},"links":{"citing_paper":"/paper/2505.08807"},"observation_digest":"sha256:ba6f77246173348c67c6e27c2ed9bf2e650c735ce6201e6c9aecbc5341e72a03","observation_id":"badbb00b-b027-4fac-9e4c-6cab9ce3d107","resolution":{"observed_at":"2026-08-15T22:26:18.831864Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:26:18.872336Z","title":"Paralyzing drones via EMI signal injection on sensory communication channels.,","venue":null,"work_id":"c9834b65-071b-47de-8708-5e2059f4cd91","year":2023},"citing_paper":{"arxiv_id":"2505.08807","last_updated":"2025-05-12T02:04:57Z","snapshot_observed_at":"2026-08-15T22:20:56.452628Z","submitted_at":"2025-05-12T02:04:57Z","title":"Security of Internet of Agents: Attacks and Countermeasures","version":1},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-15T22:26:17.960247Z"},"links":{"citing_paper":"/paper/2505.08807"},"observation_digest":"sha256:8fab4de255f7764a7952d773faae892e8e9c7414dfb8a5fc356fc7eb4412aba4","observation_id":"c72282eb-cd24-4ff1-8bf7-5c797af347ec","resolution":{"observed_at":"2026-08-15T22:26:18.877422Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:26:18.857494Z","title":"Remote attacks on drones vision sensors: An empirical study,","venue":null,"work_id":"bccdf64f-9c30-4008-8ec4-1dc13e4fcea6","year":2021},"citing_paper":{"arxiv_id":"2505.08807","last_updated":"2025-05-12T02:04:57Z","snapshot_observed_at":"2026-08-15T22:20:56.452628Z","submitted_at":"2025-05-12T02:04:57Z","title":"Security of Internet of Agents: Attacks and Countermeasures","version":1},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-15T22:26:17.966629Z"},"links":{"citing_paper":"/paper/2505.08807"},"observation_digest":"sha256:d67321bb7be0dc36938fba7b393658556eeeeb62cca90cf195099d6b1108f788","observation_id":"bee7f906-31fe-4ca0-8060-9d62fd8bacba","resolution":{"observed_at":"2026-08-15T22:26:18.862324Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:26:18.776579Z","title":"Beyond memoriza- tion: Violating privacy via inference with large language models,","venue":null,"work_id":"a8cc5c8c-be48-4bde-8d61-9ee196230217","year":2024},"citing_paper":{"arxiv_id":"2505.08807","last_updated":"2025-05-12T02:04:57Z","snapshot_observed_at":"2026-08-15T22:20:56.452628Z","submitted_at":"2025-05-12T02:04:57Z","title":"Security of Internet of Agents: Attacks and Countermeasures","version":1},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-15T22:26:17.993091Z"},"links":{"citing_paper":"/paper/2505.08807"},"observation_digest":"sha256:c8e7a81f1cea23cc11c4e57ba2e066bae1a76e902353b9c7f1b9e60b5865cbe4","observation_id":"e0fc8a2a-0850-45bf-afc4-444c1a1f3070","resolution":{"observed_at":"2026-08-15T22:26:18.781472Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:26:18.761464Z","title":"Text embeddings reveal (almost) as much as text,","venue":null,"work_id":"859b2ac9-7125-423f-8d19-ae958653a401","year":2023},"citing_paper":{"arxiv_id":"2505.08807","last_updated":"2025-05-12T02:04:57Z","snapshot_observed_at":"2026-08-15T22:20:56.452628Z","submitted_at":"2025-05-12T02:04:57Z","title":"Security of Internet of Agents: Attacks and Countermeasures","version":1},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-15T22:26:17.999405Z"},"links":{"citing_paper":"/paper/2505.08807"},"observation_digest":"sha256:aa8dbebebcedcd81f703e1a92887afd609c3cd35dfffa4b3e10caee472974b15","observation_id":"8e4cd855-dd5e-4e2b-ab90-e87dad96a96b","resolution":{"observed_at":"2026-08-15T22:26:18.766210Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:26:18.809348Z","title":"Language models meet world models: embodied experiences enhance language models,","venue":null,"work_id":"5b97792c-df9f-45f3-ac53-02a6a34b9748","year":2023},"citing_paper":{"arxiv_id":"2505.08807","last_updated":"2025-05-12T02:04:57Z","snapshot_observed_at":"2026-08-15T22:20:56.452628Z","submitted_at":"2025-05-12T02:04:57Z","title":"Security of Internet of Agents: Attacks and Countermeasures","version":1},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-15T22:26:17.982484Z"},"links":{"citing_paper":"/paper/2505.08807"},"observation_digest":"sha256:9b42ff3fefae46d1ad4e2d906f4aab1605987681428973ab457b195508012858","observation_id":"f94aa119-2fd4-4d9b-b513-7aebd2a9c0f7","resolution":{"observed_at":"2026-08-15T22:26:18.814686Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:26:18.793053Z","title":"Data augmentation can improve robustness,","venue":null,"work_id":"680d271d-8cca-4469-98c7-dc0ad219c44c","year":2021},"citing_paper":{"arxiv_id":"2505.08807","last_updated":"2025-05-12T02:04:57Z","snapshot_observed_at":"2026-08-15T22:20:56.452628Z","submitted_at":"2025-05-12T02:04:57Z","title":"Security of Internet of Agents: Attacks and Countermeasures","version":1},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-08-15T22:26:17.987525Z"},"links":{"citing_paper":"/paper/2505.08807"},"observation_digest":"sha256:7717dc51f24c1aad120f6e0e052527e08f2f3f6b3fbb85decc915b8d25a3105c","observation_id":"37561202-7584-4f64-8817-09ac887ced40","resolution":{"observed_at":"2026-08-15T22:26:18.797992Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:26:18.726433Z","title":"ProPILE: Probing privacy leakage in large language models,","venue":null,"work_id":"fa1f16f1-1568-44f2-b66d-32428aebf463","year":2023},"citing_paper":{"arxiv_id":"2505.08807","last_updated":"2025-05-12T02:04:57Z","snapshot_observed_at":"2026-08-15T22:20:56.452628Z","submitted_at":"2025-05-12T02:04:57Z","title":"Security of Internet of Agents: Attacks and Countermeasures","version":1},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-08-15T22:26:18.017908Z"},"links":{"citing_paper":"/paper/2505.08807"},"observation_digest":"sha256:4a296987ebd0d810eb4e8b513cb19725a2d72bf13563b6d0cea557b9ac21db54","observation_id":"c38d0f8f-384c-434e-9c07-2c9872f35b10","resolution":{"observed_at":"2026-08-15T22:26:18.732009Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:26:18.708981Z","title":"AutoDefense: Multi- agent LLM defense against jailbreak attacks,","venue":null,"work_id":"d24d5557-29f9-4a93-add9-1a5bc486df0d","year":2024},"citing_paper":{"arxiv_id":"2505.08807","last_updated":"2025-05-12T02:04:57Z","snapshot_observed_at":"2026-08-15T22:20:56.452628Z","submitted_at":"2025-05-12T02:04:57Z","title":"Security of Internet of Agents: Attacks and Countermeasures","version":1},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-08-15T22:26:18.023507Z"},"links":{"citing_paper":"/paper/2505.08807"},"observation_digest":"sha256:9e640fae3e9017b3d3f7c862f03b1b59beef7f1c2a1b7f9da31f62151dfbca2b","observation_id":"46f9012a-7189-4689-bf29-ec01e7d44416","resolution":{"observed_at":"2026-08-15T22:26:18.714345Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2411.14110","last_updated":"2025-08-08T11:56:30Z","snapshot_observed_at":"2026-08-18T19:23:42.082799Z","submitted_at":"2024-11-21T13:18:03Z","title":"Feedback-Guided Extraction of Knowledge Base from Retrieval-Augmented LLM Applications","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2411.14110","snapshot_observed_at":"2026-08-15T22:26:18.005246Z","title":"RAG-Thief: Scalable extraction of private data from retrieval-augmented generation applications with agent-based attacks,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.08807","last_updated":"2025-05-12T02:04:57Z","snapshot_observed_at":"2026-08-15T22:20:56.452628Z","submitted_at":"2025-05-12T02:04:57Z","title":"Security of Internet of Agents: Attacks and Countermeasures","version":1},"reference_index":58,"source":"pdf_text","source_observed_at":"2026-08-15T22:26:18.005246Z"},"links":{"cited_paper":"/paper/2411.14110","citing_paper":"/paper/2505.08807"},"observation_digest":"sha256:4c62e85839bddac6a435f387c5fea367e87726e2e4dc3ad2a89f15a93fcd99a6","observation_id":"4e07d835-3440-4e31-bb7c-0c3e86615258","resolution":{"observed_at":"2026-08-15T22:26:18.005246Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:26:18.744651Z","title":"Extracting training data from large language models,","venue":null,"work_id":"1207700f-027e-4205-a6b5-02de5ebf4d77","year":2021},"citing_paper":{"arxiv_id":"2505.08807","last_updated":"2025-05-12T02:04:57Z","snapshot_observed_at":"2026-08-15T22:20:56.452628Z","submitted_at":"2025-05-12T02:04:57Z","title":"Security of Internet of Agents: Attacks and Countermeasures","version":1},"reference_index":59,"source":"pdf_text","source_observed_at":"2026-08-15T22:26:18.011481Z"},"links":{"citing_paper":"/paper/2505.08807"},"observation_digest":"sha256:ff102fbee6cb055e8cd7fe2e42aa3a4534c9a7d3c28baee11ef9663c297c46df","observation_id":"9e8a61d0-6741-45f5-9e54-bda2af26350e","resolution":{"observed_at":"2026-08-15T22:26:18.750709Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:26:18.650824Z","title":"Mobile edge intelligence for large language models: A contemporary survey,","venue":null,"work_id":"ddc9ea8f-0bd3-4445-864a-5b4bcb7163ea","year":2025},"citing_paper":{"arxiv_id":"2505.08807","last_updated":"2025-05-12T02:04:57Z","snapshot_observed_at":"2026-08-15T22:20:56.452628Z","submitted_at":"2025-05-12T02:04:57Z","title":"Security of Internet of Agents: Attacks and Countermeasures","version":1},"reference_index":60,"source":"pdf_text","source_observed_at":"2026-08-15T22:26:18.041439Z"},"links":{"citing_paper":"/paper/2505.08807"},"observation_digest":"sha256:f318ffaaad26c0b90e569551c2e9845cda43fcd0f008bd21f627f263568208ac","observation_id":"03673794-e9c8-4af6-844c-556c5d311f35","resolution":{"observed_at":"2026-08-15T22:26:18.657722Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:26:18.689242Z","title":"AutoGen: Enabling next-gen LLM applications via multi- agent conversation,","venue":null,"work_id":"31f92a50-5a1b-4fb7-b163-36766ace80f7","year":2024},"citing_paper":{"arxiv_id":"2505.08807","last_updated":"2025-05-12T02:04:57Z","snapshot_observed_at":"2026-08-15T22:20:56.452628Z","submitted_at":"2025-05-12T02:04:57Z","title":"Security of Internet of Agents: Attacks and Countermeasures","version":1},"reference_index":62,"source":"pdf_text","source_observed_at":"2026-08-15T22:26:18.029117Z"},"links":{"citing_paper":"/paper/2505.08807"},"observation_digest":"sha256:b3842046c8530aeb94570e97952f6b4ff72b6824d3ae93b3ddff60eba59c3109","observation_id":"8fe300fb-8199-403c-af1c-ef4a1b74c603","resolution":{"observed_at":"2026-08-15T22:26:18.695428Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:26:18.668538Z","title":"Social-aware clustered federated learning with customized privacy preservation,","venue":null,"work_id":"6c78f30d-e6b4-49b9-b56c-c8391f9412a1","year":2024},"citing_paper":{"arxiv_id":"2505.08807","last_updated":"2025-05-12T02:04:57Z","snapshot_observed_at":"2026-08-15T22:20:56.452628Z","submitted_at":"2025-05-12T02:04:57Z","title":"Security of Internet of Agents: Attacks and Countermeasures","version":1},"reference_index":63,"source":"pdf_text","source_observed_at":"2026-08-15T22:26:18.035431Z"},"links":{"citing_paper":"/paper/2505.08807"},"observation_digest":"sha256:7fcec91c80d34b5aab7da7d9f409da6c262829fa3ba4b6fd225e504d7907cca4","observation_id":"ff7b8b09-9477-49e9-9aea-cd7529c15e48","resolution":{"observed_at":"2026-08-15T22:26:18.673792Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:26:17.831538Z","title":"20, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2505.08807","last_updated":"2025-05-12T02:04:57Z","snapshot_observed_at":"2026-08-15T22:20:56.452628Z","submitted_at":"2025-05-12T02:04:57Z","title":"Security of Internet of Agents: Attacks and Countermeasures","version":1},"reference_index":2024,"source":"pdf_text","source_observed_at":"2026-08-15T22:26:17.831538Z"},"links":{"citing_paper":"/paper/2505.08807"},"observation_digest":"sha256:4cf2bc589e8cfc53aaecc4db24dd41a621f08a8f6122b56010d5bed83a060800","observation_id":"359d065a-2052-471a-8637-52e3146f9a67","resolution":{"observed_at":"2026-08-15T22:26:17.831538Z","resolver_source":null,"status":"parse_uncertain"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2505.08807","last_updated":"2025-05-12T02:04:57Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-15T22:20:56.452628Z","submitted_at":"2025-05-12T02:04:57Z","title":"Security of Internet of Agents: Attacks and Countermeasures"},"reference_resolution":{"displayed":63,"state_counts":{"malformed_identifier":0,"metadata_mismatch":1,"parse_uncertain":3,"unresolved":16,"verified_exact":0,"verified_fuzzy":43},"total_outbound_references":63},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"thesis":"As of 20 August 2026, this Paper Citation Record lists 63 of 63 outbound references and 3 inbound Pith citation observations for arXiv:2505.08807."}