{"as_of":"2026-08-18T00:58:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:e60e6e14bc3f1f09c2125f445ff7146ee50fdad6e3295e9479ef311113d61b67","coverage":[{"denominator":46,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":46,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-15T19:26:17.983977Z","state":"measured"},{"denominator":47,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":47,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-17T06:30:58.91139+00:00","state":"measured"},{"denominator":1,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":1,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-06T21:17:58.321800Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"pith","source_observed_at":"2026-08-06T21:17:59.990957Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2506.17350","last_updated":"2025-06-20T00:47:30Z","snapshot_observed_at":"2026-08-17T07:25:35.475674Z","submitted_at":"2025-06-20T00:47:30Z","title":"CUBA: Controlled Untargeted Backdoor Attack against Deep Neural Networks","version":1},"cited_work":{"arxiv_id":"2506.17350","doi":null,"metadata_source":"pith","pith_arxiv_id":"2506.17350","snapshot_observed_at":"2026-08-06T21:17:59.990957Z","title":"CUBA: Controlled Untargeted Backdoor Attack against Deep Neural Networks","venue":"cs.CR","work_id":"8d330b65-7638-427a-9c6b-009ae44a12ec","year":2025},"citing_paper":{"arxiv_id":"2507.00577","last_updated":"2025-07-01T08:59:24Z","snapshot_observed_at":"2026-08-16T09:26:42.494238Z","submitted_at":"2025-07-01T08:59:24Z","title":"BadViM: Backdoor Attack against Vision Mamba","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-06T21:17:58.321800Z"},"links":{"cited_paper":"/paper/2506.17350","citing_paper":"/paper/2507.00577"},"observation_digest":"sha256:10fc40344634abe8df0f2848c832106e9dc45d8da3b4627e762693e05940a807","observation_id":"4546f43e-5c36-4083-87d4-ab04ea703b29","resolution":{"observed_at":"2026-08-06T21:18:00.059264Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2506.17350/citation-record","integrity":"/paper/2506.17350/integrity","json":"/paper/2506.17350/citation-record.json","paper":"/paper/2506.17350"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T19:26:18.523504Z","title":"BadNets: Evaluating backdooring attacks on deep neural networks,","venue":null,"work_id":"51013e2e-f463-4444-8d8c-cef11467416e","year":2019},"citing_paper":{"arxiv_id":"2506.17350","last_updated":"2025-06-20T00:47:30Z","snapshot_observed_at":"2026-08-17T07:25:35.475674Z","submitted_at":"2025-06-20T00:47:30Z","title":"CUBA: Controlled Untargeted Backdoor Attack against Deep Neural Networks","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-15T19:26:17.819824Z"},"links":{"citing_paper":"/paper/2506.17350"},"observation_digest":"sha256:0d3ecb0f1f68247237c33f467feb332dc7b68f9cb33270690c6e7a9307ded2c5","observation_id":"16f9be39-bb7c-43ca-a041-80919506b701","resolution":{"observed_at":"2026-08-15T19:26:18.527816Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T19:26:18.512189Z","title":"Imperceptible Backdoor Attack: From input space to feature representation,","venue":null,"work_id":"285fb694-92ba-4ee5-95a4-0be2a7ae0168","year":2022},"citing_paper":{"arxiv_id":"2506.17350","last_updated":"2025-06-20T00:47:30Z","snapshot_observed_at":"2026-08-17T07:25:35.475674Z","submitted_at":"2025-06-20T00:47:30Z","title":"CUBA: Controlled Untargeted Backdoor Attack against Deep Neural Networks","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-15T19:26:17.824215Z"},"links":{"citing_paper":"/paper/2506.17350"},"observation_digest":"sha256:f2a6091a639aba0b07a5eeb52a3b8c7aad219a007501a281ce5328058b521539","observation_id":"684493c6-1d80-43c4-9792-e89804de3921","resolution":{"observed_at":"2026-08-15T19:26:18.515741Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T19:26:18.500919Z","title":"Bypassing backdoor detection algorithms in deep learning,","venue":null,"work_id":"7579f7ff-590d-4439-8af0-f58dbdd689eb","year":2020},"citing_paper":{"arxiv_id":"2506.17350","last_updated":"2025-06-20T00:47:30Z","snapshot_observed_at":"2026-08-17T07:25:35.475674Z","submitted_at":"2025-06-20T00:47:30Z","title":"CUBA: Controlled Untargeted Backdoor Attack against Deep Neural Networks","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-15T19:26:17.828369Z"},"links":{"citing_paper":"/paper/2506.17350"},"observation_digest":"sha256:b5c51b1d8fd781830ed3ecfe803081d5e26069fbf3540bd13fb7c9a2f690affe","observation_id":"ba48dc83-037c-4ed7-aaa2-5e05d39887bc","resolution":{"observed_at":"2026-08-15T19:26:18.505038Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T19:26:18.489357Z","title":"Expose backdoors on the way: A feature-based efficient defense against textual backdoor attacks,","venue":null,"work_id":"95037912-3b64-47e2-ba3b-e441c353285a","year":2022},"citing_paper":{"arxiv_id":"2506.17350","last_updated":"2025-06-20T00:47:30Z","snapshot_observed_at":"2026-08-17T07:25:35.475674Z","submitted_at":"2025-06-20T00:47:30Z","title":"CUBA: Controlled Untargeted Backdoor Attack against Deep Neural Networks","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-15T19:26:17.832346Z"},"links":{"citing_paper":"/paper/2506.17350"},"observation_digest":"sha256:87aba57fdc502a308b13be3a336d88a7f858a5ce03b4cf2dedf4f780a9729199","observation_id":"561dfa26-eef4-4330-8d8d-b88731737022","resolution":{"observed_at":"2026-08-15T19:26:18.493136Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T19:26:18.479092Z","title":"Explaining and harnessing adversarial examples,","venue":null,"work_id":"d3f4532b-8728-478d-9b4d-de23569a4f52","year":2015},"citing_paper":{"arxiv_id":"2506.17350","last_updated":"2025-06-20T00:47:30Z","snapshot_observed_at":"2026-08-17T07:25:35.475674Z","submitted_at":"2025-06-20T00:47:30Z","title":"CUBA: Controlled Untargeted Backdoor Attack against Deep Neural Networks","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-15T19:26:17.836169Z"},"links":{"citing_paper":"/paper/2506.17350"},"observation_digest":"sha256:f4542c9a04836f994f8a70213a9db3cb759fe8d54f9be85a44872143f7f27600","observation_id":"9af6f73f-5a3f-4ef9-828a-43fce9272825","resolution":{"observed_at":"2026-08-15T19:26:18.482381Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T19:26:18.468316Z","title":"Universal adversarial perturbations,","venue":null,"work_id":"3d56b535-dc07-4088-bad8-6feb47ebcdaf","year":2017},"citing_paper":{"arxiv_id":"2506.17350","last_updated":"2025-06-20T00:47:30Z","snapshot_observed_at":"2026-08-17T07:25:35.475674Z","submitted_at":"2025-06-20T00:47:30Z","title":"CUBA: Controlled Untargeted Backdoor Attack against Deep Neural Networks","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-15T19:26:17.840426Z"},"links":{"citing_paper":"/paper/2506.17350"},"observation_digest":"sha256:d2f1667265066975d53991218853c2c41453144d7dca0789140fe256fe8d2760","observation_id":"9d1b9b9d-277b-460f-ab97-c64baeb6c1ca","resolution":{"observed_at":"2026-08-15T19:26:18.471988Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T19:26:18.457920Z","title":"Wanet - imperceptible warping-based backdoor attack,","venue":null,"work_id":"3bf2af81-bc56-4551-b5fa-3137a35a97a0","year":2021},"citing_paper":{"arxiv_id":"2506.17350","last_updated":"2025-06-20T00:47:30Z","snapshot_observed_at":"2026-08-17T07:25:35.475674Z","submitted_at":"2025-06-20T00:47:30Z","title":"CUBA: Controlled Untargeted Backdoor Attack against Deep Neural Networks","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-15T19:26:17.844410Z"},"links":{"citing_paper":"/paper/2506.17350"},"observation_digest":"sha256:da819504be690646b07e4c59574567567a1bd534ff46b6ab1c66c77a8ac6d89c","observation_id":"9dc18879-97e3-4ec1-ab29-74c75fdc53b5","resolution":{"observed_at":"2026-08-15T19:26:18.461511Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T19:26:18.447762Z","title":"Hidden trigger backdoor attacks,","venue":null,"work_id":"a7f42d67-ddba-4e25-9cfe-a3bdda16acc4","year":2020},"citing_paper":{"arxiv_id":"2506.17350","last_updated":"2025-06-20T00:47:30Z","snapshot_observed_at":"2026-08-17T07:25:35.475674Z","submitted_at":"2025-06-20T00:47:30Z","title":"CUBA: Controlled Untargeted Backdoor Attack against Deep Neural Networks","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-15T19:26:17.847991Z"},"links":{"citing_paper":"/paper/2506.17350"},"observation_digest":"sha256:ce263805f3420538dc38f3fe732b768859d1c3a3b1a6d12cbb4c9af576657152","observation_id":"8cdfc08e-0153-4dee-903d-e93c919e51f4","resolution":{"observed_at":"2026-08-15T19:26:18.451357Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T19:26:18.437211Z","title":"Deep feature space trojan attack of neural networks by controlled detoxification,","venue":null,"work_id":"0c25ad31-dc17-482c-b4cf-b67289c4f4e9","year":2021},"citing_paper":{"arxiv_id":"2506.17350","last_updated":"2025-06-20T00:47:30Z","snapshot_observed_at":"2026-08-17T07:25:35.475674Z","submitted_at":"2025-06-20T00:47:30Z","title":"CUBA: Controlled Untargeted Backdoor Attack against Deep Neural Networks","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-15T19:26:17.851647Z"},"links":{"citing_paper":"/paper/2506.17350"},"observation_digest":"sha256:bad3bce933086816ffc1708d777411d1cfb2d9736507d24b57bf63d362eb38f5","observation_id":"205dbc69-92eb-4652-9884-1cb881f86afc","resolution":{"observed_at":"2026-08-15T19:26:18.441016Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T19:26:18.426389Z","title":"LIRA: learnable, imperceptible and robust backdoor attacks,","venue":null,"work_id":"cf37bc9f-db7c-4c0c-b4f0-928983ee15a2","year":2021},"citing_paper":{"arxiv_id":"2506.17350","last_updated":"2025-06-20T00:47:30Z","snapshot_observed_at":"2026-08-17T07:25:35.475674Z","submitted_at":"2025-06-20T00:47:30Z","title":"CUBA: Controlled Untargeted Backdoor Attack against Deep Neural Networks","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-15T19:26:17.855285Z"},"links":{"citing_paper":"/paper/2506.17350"},"observation_digest":"sha256:252b5d9863139280b742f218a9b03434a5b625475f02b1c6753b04626c4752cd","observation_id":"64c5551c-a0d5-4876-ae93-5cbbc1e63d7e","resolution":{"observed_at":"2026-08-15T19:26:18.430161Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T19:26:18.414970Z","title":"Blind backdoors in deep learning models,","venue":null,"work_id":"8015f1d5-2068-4a95-a1e4-52047b314296","year":2021},"citing_paper":{"arxiv_id":"2506.17350","last_updated":"2025-06-20T00:47:30Z","snapshot_observed_at":"2026-08-17T07:25:35.475674Z","submitted_at":"2025-06-20T00:47:30Z","title":"CUBA: Controlled Untargeted Backdoor Attack against Deep Neural Networks","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-15T19:26:17.858882Z"},"links":{"citing_paper":"/paper/2506.17350"},"observation_digest":"sha256:c69e822019034428d3618b9732a20751794e6a57acc72a1f37d68a8e57985409","observation_id":"33cfe483-5179-412a-ae57-790e47a9edd9","resolution":{"observed_at":"2026-08-15T19:26:18.418561Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T19:26:18.403618Z","title":"Backdoor attack with imperceptible input and latent modification,","venue":null,"work_id":"990ca0c8-624e-48d4-808e-e1514c9902ef","year":2021},"citing_paper":{"arxiv_id":"2506.17350","last_updated":"2025-06-20T00:47:30Z","snapshot_observed_at":"2026-08-17T07:25:35.475674Z","submitted_at":"2025-06-20T00:47:30Z","title":"CUBA: Controlled Untargeted Backdoor Attack against Deep Neural Networks","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-15T19:26:17.862682Z"},"links":{"citing_paper":"/paper/2506.17350"},"observation_digest":"sha256:85e99f184b3bdbfd3d226d96c7268b484195417202413bb5e536fcabb72c5817","observation_id":"873e5a6a-4fdd-488c-9351-5cf2c1e45f6c","resolution":{"observed_at":"2026-08-15T19:26:18.407335Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T19:26:18.391574Z","title":"Invisible backdoor attack with sample-specific triggers,","venue":null,"work_id":"186805a5-0b4c-4cf1-8dd2-fd5acf255f71","year":2021},"citing_paper":{"arxiv_id":"2506.17350","last_updated":"2025-06-20T00:47:30Z","snapshot_observed_at":"2026-08-17T07:25:35.475674Z","submitted_at":"2025-06-20T00:47:30Z","title":"CUBA: Controlled Untargeted Backdoor Attack against Deep Neural Networks","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-15T19:26:17.866476Z"},"links":{"citing_paper":"/paper/2506.17350"},"observation_digest":"sha256:64eea8a1e823ecd5fc6cd094da8807c79ea331cb77b5632369cc1680da4a181d","observation_id":"dfc47989-fa31-4429-935b-4b47054e2ed1","resolution":{"observed_at":"2026-08-15T19:26:18.395589Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T19:26:18.379706Z","title":"Marksman backdoor: Backdoor attacks with arbitrary target class,","venue":null,"work_id":"fde21d3c-95d7-4901-b2fa-ef4185d6ebe9","year":2022},"citing_paper":{"arxiv_id":"2506.17350","last_updated":"2025-06-20T00:47:30Z","snapshot_observed_at":"2026-08-17T07:25:35.475674Z","submitted_at":"2025-06-20T00:47:30Z","title":"CUBA: Controlled Untargeted Backdoor Attack against Deep Neural Networks","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-15T19:26:17.870779Z"},"links":{"citing_paper":"/paper/2506.17350"},"observation_digest":"sha256:7287a89174c452d7216306bb76dd47a25a35571b58962b06a5e94f316e0029d3","observation_id":"33a25726-8118-4694-8d76-9efff67e494b","resolution":{"observed_at":"2026-08-15T19:26:18.383638Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T19:26:18.368234Z","title":"Input-aware dynamic backdoor attack,","venue":null,"work_id":"89376653-f8be-4110-89aa-4241a8a1bec5","year":2020},"citing_paper":{"arxiv_id":"2506.17350","last_updated":"2025-06-20T00:47:30Z","snapshot_observed_at":"2026-08-17T07:25:35.475674Z","submitted_at":"2025-06-20T00:47:30Z","title":"CUBA: Controlled Untargeted Backdoor Attack against Deep Neural Networks","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-15T19:26:17.874266Z"},"links":{"citing_paper":"/paper/2506.17350"},"observation_digest":"sha256:eecd8db14ac168c81b658b9d252f622b3cdb887c640a56500656352b085f6f16","observation_id":"86ddc06f-a990-4a91-ab35-48ddb2ef900b","resolution":{"observed_at":"2026-08-15T19:26:18.372051Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T19:26:18.357526Z","title":"Dynamic back- door attacks against machine learning models,","venue":null,"work_id":"4d5e3ea9-857d-4bc1-b169-4028e29eb739","year":2022},"citing_paper":{"arxiv_id":"2506.17350","last_updated":"2025-06-20T00:47:30Z","snapshot_observed_at":"2026-08-17T07:25:35.475674Z","submitted_at":"2025-06-20T00:47:30Z","title":"CUBA: Controlled Untargeted Backdoor Attack against Deep Neural Networks","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-15T19:26:17.877833Z"},"links":{"citing_paper":"/paper/2506.17350"},"observation_digest":"sha256:4e2471d206f983b0f4a2e635bbe6db4b9d0a36756e67d207be1c0016c70cccf0","observation_id":"50d3e0a2-566f-40e2-9779-692dfb435f76","resolution":{"observed_at":"2026-08-15T19:26:18.361439Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T19:26:18.345340Z","title":"Poison Frogs! targeted clean-label poisoning attacks on neural networks,","venue":null,"work_id":"006fbad3-d7c7-4ffd-9d4b-63bab8d2d806","year":2018},"citing_paper":{"arxiv_id":"2506.17350","last_updated":"2025-06-20T00:47:30Z","snapshot_observed_at":"2026-08-17T07:25:35.475674Z","submitted_at":"2025-06-20T00:47:30Z","title":"CUBA: Controlled Untargeted Backdoor Attack against Deep Neural Networks","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-15T19:26:17.881499Z"},"links":{"citing_paper":"/paper/2506.17350"},"observation_digest":"sha256:c452c89e54602a19076b78991cd3b6c7aca64c9fb23012fd6a88cfedf78af9bb","observation_id":"960e6b8a-2491-46d6-ad3b-d3860146ccbc","resolution":{"observed_at":"2026-08-15T19:26:18.349555Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T19:26:18.333053Z","title":"Bppattack: Stealthy and efficient trojan attacks against deep neural networks via image quantization and contrastive adversarial learning,","venue":null,"work_id":"0af17b22-62b5-4c61-9b20-12ca23361696","year":2022},"citing_paper":{"arxiv_id":"2506.17350","last_updated":"2025-06-20T00:47:30Z","snapshot_observed_at":"2026-08-17T07:25:35.475674Z","submitted_at":"2025-06-20T00:47:30Z","title":"CUBA: Controlled Untargeted Backdoor Attack against Deep Neural Networks","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-15T19:26:17.885037Z"},"links":{"citing_paper":"/paper/2506.17350"},"observation_digest":"sha256:7fccec098ca0c78b878c7c734292a02de15422f12d2c5ad41aa7bef630d33451","observation_id":"07c3c373-6f54-4b43-82d7-7a3e7e6bca8e","resolution":{"observed_at":"2026-08-15T19:26:18.337601Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T19:26:18.321122Z","title":"Transferable clean-label poisoning attacks on deep neural nets,","venue":null,"work_id":"f3db4f0d-36c9-4738-afaa-cd21b381ffa2","year":2019},"citing_paper":{"arxiv_id":"2506.17350","last_updated":"2025-06-20T00:47:30Z","snapshot_observed_at":"2026-08-17T07:25:35.475674Z","submitted_at":"2025-06-20T00:47:30Z","title":"CUBA: Controlled Untargeted Backdoor Attack against Deep Neural Networks","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-15T19:26:17.888760Z"},"links":{"citing_paper":"/paper/2506.17350"},"observation_digest":"sha256:a6fb0e3142c4490196df65369c54b9093e255d24dcc2d40657b1d0dc868396b9","observation_id":"cec827a8-2d0a-4e8e-9f8b-54667ee8e322","resolution":{"observed_at":"2026-08-15T19:26:18.325250Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T19:26:18.308659Z","title":"Feat: Frequency energy based backdoor attack in deep neural networks,","venue":null,"work_id":"40324ee3-565e-425b-8fb9-d711e58647a6","year":2025},"citing_paper":{"arxiv_id":"2506.17350","last_updated":"2025-06-20T00:47:30Z","snapshot_observed_at":"2026-08-17T07:25:35.475674Z","submitted_at":"2025-06-20T00:47:30Z","title":"CUBA: Controlled Untargeted Backdoor Attack against Deep Neural Networks","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-15T19:26:17.892146Z"},"links":{"citing_paper":"/paper/2506.17350"},"observation_digest":"sha256:cdd5f891277851bf32b4700d76839a0d5b27884811e775bab3aaafb83254682d","observation_id":"a4f3302b-e17f-4cf5-8e2d-c9068387a16b","resolution":{"observed_at":"2026-08-15T19:26:18.312765Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T19:26:18.297494Z","title":"One-to-multiple clean-label image camouflage (omclic) based backdoor attack on deep learning,","venue":null,"work_id":"d1cfe45f-5256-4d14-822e-ba7616bcc4a7","year":2024},"citing_paper":{"arxiv_id":"2506.17350","last_updated":"2025-06-20T00:47:30Z","snapshot_observed_at":"2026-08-17T07:25:35.475674Z","submitted_at":"2025-06-20T00:47:30Z","title":"CUBA: Controlled Untargeted Backdoor Attack against Deep Neural Networks","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-15T19:26:17.895833Z"},"links":{"citing_paper":"/paper/2506.17350"},"observation_digest":"sha256:bd2965620f46efabedfc6c2c4341fe2def4ab517db44178e3212d8c24367a863","observation_id":"1fcdeb97-8f0e-480f-a1fa-0f35fed4eb93","resolution":{"observed_at":"2026-08-15T19:26:18.301456Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T19:26:18.285694Z","title":"A clean-label graph backdoor attack method in node classification task,","venue":null,"work_id":"e3e1381a-3ceb-490c-9440-b90962475b24","year":2024},"citing_paper":{"arxiv_id":"2506.17350","last_updated":"2025-06-20T00:47:30Z","snapshot_observed_at":"2026-08-17T07:25:35.475674Z","submitted_at":"2025-06-20T00:47:30Z","title":"CUBA: Controlled Untargeted Backdoor Attack against Deep Neural Networks","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-15T19:26:17.899634Z"},"links":{"citing_paper":"/paper/2506.17350"},"observation_digest":"sha256:56d90240c7480b046971d9fdd9d37b5fe9e977cb65d5fb3748fcd491a368c84c","observation_id":"43b09027-8f2e-416f-af62-4f03d97fefcc","resolution":{"observed_at":"2026-08-15T19:26:18.289442Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T19:26:18.274467Z","title":"Detecting backdoors in pre-trained encoders,","venue":null,"work_id":"bf643336-8ebd-43b1-8ade-06a4d93b5c6c","year":2023},"citing_paper":{"arxiv_id":"2506.17350","last_updated":"2025-06-20T00:47:30Z","snapshot_observed_at":"2026-08-17T07:25:35.475674Z","submitted_at":"2025-06-20T00:47:30Z","title":"CUBA: Controlled Untargeted Backdoor Attack against Deep Neural Networks","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-15T19:26:17.903214Z"},"links":{"citing_paper":"/paper/2506.17350"},"observation_digest":"sha256:22bf8bfa1c8d0cfc1b989fd82843dfa2ee47115e39f80a3f8f2d807ec5356803","observation_id":"7b92095a-ab31-4c89-a0bc-7e5c0d3b0a5a","resolution":{"observed_at":"2026-08-15T19:26:18.278453Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T19:26:18.263516Z","title":"Universal litmus patterns: Revealing backdoor attacks in cnns,","venue":null,"work_id":"79128847-6054-41ba-99de-4183d60e8b2b","year":2020},"citing_paper":{"arxiv_id":"2506.17350","last_updated":"2025-06-20T00:47:30Z","snapshot_observed_at":"2026-08-17T07:25:35.475674Z","submitted_at":"2025-06-20T00:47:30Z","title":"CUBA: Controlled Untargeted Backdoor Attack against Deep Neural Networks","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-15T19:26:17.906770Z"},"links":{"citing_paper":"/paper/2506.17350"},"observation_digest":"sha256:d320c73b524298ff415abc963a1514895a55f17168f8bd38d7c07b4e44db7097","observation_id":"2466e8bb-0639-4771-a137-3735a06ff9a0","resolution":{"observed_at":"2026-08-15T19:26:18.267228Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T19:26:18.251167Z","title":"Backdoor scanning for deep neural networks through k- arm optimization,","venue":null,"work_id":"bcf354cc-65f1-4c3f-b1d8-c89fbef801e6","year":2021},"citing_paper":{"arxiv_id":"2506.17350","last_updated":"2025-06-20T00:47:30Z","snapshot_observed_at":"2026-08-17T07:25:35.475674Z","submitted_at":"2025-06-20T00:47:30Z","title":"CUBA: Controlled Untargeted Backdoor Attack against Deep Neural Networks","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-15T19:26:17.910347Z"},"links":{"citing_paper":"/paper/2506.17350"},"observation_digest":"sha256:a02a7ee323fb02a1eaa1b6a0e2e681a9e01c4a73c5d0a67ffa402e8508801807","observation_id":"a6dd99ce-ef28-4803-a335-e77a76cd293b","resolution":{"observed_at":"2026-08-15T19:26:18.256253Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T19:26:18.239681Z","title":"Neural cleanse: Identifying and mitigating backdoor attacks in neural networks,","venue":null,"work_id":"a33b28c0-74f8-44ea-a440-a5ee0e82dac4","year":2019},"citing_paper":{"arxiv_id":"2506.17350","last_updated":"2025-06-20T00:47:30Z","snapshot_observed_at":"2026-08-17T07:25:35.475674Z","submitted_at":"2025-06-20T00:47:30Z","title":"CUBA: Controlled Untargeted Backdoor Attack against Deep Neural Networks","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-15T19:26:17.913786Z"},"links":{"citing_paper":"/paper/2506.17350"},"observation_digest":"sha256:13451f950825ee029a0a6145269969d96eaf016e060588d336f0779259dc278c","observation_id":"c98d84b7-f565-4344-af50-3125531ecadb","resolution":{"observed_at":"2026-08-15T19:26:18.243850Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T19:26:18.227969Z","title":"Detecting backdoor attacks on deep neural networks by activation clustering,","venue":null,"work_id":"7e3e3f2a-a2a3-451a-a87c-7a2fec543f5b","year":2019},"citing_paper":{"arxiv_id":"2506.17350","last_updated":"2025-06-20T00:47:30Z","snapshot_observed_at":"2026-08-17T07:25:35.475674Z","submitted_at":"2025-06-20T00:47:30Z","title":"CUBA: Controlled Untargeted Backdoor Attack against Deep Neural Networks","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-15T19:26:17.917295Z"},"links":{"citing_paper":"/paper/2506.17350"},"observation_digest":"sha256:47c97de68e1ddc6b8506b55a19b3fecc7c1c657bfa21b7c87d946861b17872a4","observation_id":"24ffb656-5efd-4e5f-967f-f4d31db9eb8f","resolution":{"observed_at":"2026-08-15T19:26:18.232038Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T19:26:18.215771Z","title":"SentiNet: Detecting localized universal attacks against deep learning systems,","venue":null,"work_id":"ab78163f-9dbc-4d88-8cfb-b808fe18e89d","year":2020},"citing_paper":{"arxiv_id":"2506.17350","last_updated":"2025-06-20T00:47:30Z","snapshot_observed_at":"2026-08-17T07:25:35.475674Z","submitted_at":"2025-06-20T00:47:30Z","title":"CUBA: Controlled Untargeted Backdoor Attack against Deep Neural Networks","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-15T19:26:17.920977Z"},"links":{"citing_paper":"/paper/2506.17350"},"observation_digest":"sha256:4e225ccae96136bb1b0ea796fbfc052ed3a1cea0d2b805d32d2058da3b22e61c","observation_id":"f330c6ba-967d-4a20-a4cc-38453409dcf8","resolution":{"observed_at":"2026-08-15T19:26:18.219722Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T19:26:18.204600Z","title":"Spectral signatures in backdoor at- tacks,","venue":null,"work_id":"eddd903c-8f00-44bb-b1b6-58037c3ea751","year":2018},"citing_paper":{"arxiv_id":"2506.17350","last_updated":"2025-06-20T00:47:30Z","snapshot_observed_at":"2026-08-17T07:25:35.475674Z","submitted_at":"2025-06-20T00:47:30Z","title":"CUBA: Controlled Untargeted Backdoor Attack against Deep Neural Networks","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-15T19:26:17.924620Z"},"links":{"citing_paper":"/paper/2506.17350"},"observation_digest":"sha256:4df90b2d39885e472f471d7658ec08f9a54a93ded518103d02ff7107d18e5a30","observation_id":"de1319c4-3e97-43ae-812b-c7e0de8a7bbb","resolution":{"observed_at":"2026-08-15T19:26:18.208353Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T19:26:18.193309Z","title":"Design and evaluation of a multi-domain trojan detection method on deep neural networks,","venue":null,"work_id":"67542bb9-0917-4597-be9e-28ee1f21f38a","year":2022},"citing_paper":{"arxiv_id":"2506.17350","last_updated":"2025-06-20T00:47:30Z","snapshot_observed_at":"2026-08-17T07:25:35.475674Z","submitted_at":"2025-06-20T00:47:30Z","title":"CUBA: Controlled Untargeted Backdoor Attack against Deep Neural Networks","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-15T19:26:17.928634Z"},"links":{"citing_paper":"/paper/2506.17350"},"observation_digest":"sha256:0427f4293562bd254a639c93b540bcd258f5549e78ff40ab422b200a3552d0f8","observation_id":"7bdec6fe-5544-4053-af6b-8de6cdd1a253","resolution":{"observed_at":"2026-08-15T19:26:18.197169Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T19:26:18.181434Z","title":"Demon in the variant: Statistical analysis of dnns for robust backdoor contamination detection,","venue":null,"work_id":"52384f8c-2135-4b70-8ea7-1465423e9d7f","year":2021},"citing_paper":{"arxiv_id":"2506.17350","last_updated":"2025-06-20T00:47:30Z","snapshot_observed_at":"2026-08-17T07:25:35.475674Z","submitted_at":"2025-06-20T00:47:30Z","title":"CUBA: Controlled Untargeted Backdoor Attack against Deep Neural Networks","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-15T19:26:17.932425Z"},"links":{"citing_paper":"/paper/2506.17350"},"observation_digest":"sha256:57b6030e7c936b0e18a8f0b79d79da09ddf142a2d938e43d7f95a9bddc3b9629","observation_id":"6a981e29-c6a5-4b97-b8dd-6e8e4f151a9a","resolution":{"observed_at":"2026-08-15T19:26:18.185556Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T19:26:18.170325Z","title":"Certified robustness of nearest neighbors against data poisoning and backdoor attacks,","venue":null,"work_id":"227d7c80-f83d-4a87-95b4-0e736b6b9d44","year":2022},"citing_paper":{"arxiv_id":"2506.17350","last_updated":"2025-06-20T00:47:30Z","snapshot_observed_at":"2026-08-17T07:25:35.475674Z","submitted_at":"2025-06-20T00:47:30Z","title":"CUBA: Controlled Untargeted Backdoor Attack against Deep Neural Networks","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-15T19:26:17.935772Z"},"links":{"citing_paper":"/paper/2506.17350"},"observation_digest":"sha256:0310125d289589e5408de28af4b54ef74b97f6ac090bc978480794ed51bf442a","observation_id":"b5f9254f-e72c-469f-be94-8db474556878","resolution":{"observed_at":"2026-08-15T19:26:18.174145Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T19:26:18.158339Z","title":"Patchguard: A provably robust defense against adversarial patches via small receptive fields and masking,","venue":null,"work_id":"82177141-ac91-41df-bc68-6df4e8a57471","year":2021},"citing_paper":{"arxiv_id":"2506.17350","last_updated":"2025-06-20T00:47:30Z","snapshot_observed_at":"2026-08-17T07:25:35.475674Z","submitted_at":"2025-06-20T00:47:30Z","title":"CUBA: Controlled Untargeted Backdoor Attack against Deep Neural Networks","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-15T19:26:17.939482Z"},"links":{"citing_paper":"/paper/2506.17350"},"observation_digest":"sha256:ab553576f32e8f4d1831851742b7bc662ddd607d34e62dcdaa3cfd62bd345d57","observation_id":"de8ebb24-7049-4663-9d9a-8e780a424b19","resolution":{"observed_at":"2026-08-15T19:26:18.162904Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T19:26:18.146300Z","title":"A defense method against backdoor attacks on neural networks,","venue":null,"work_id":"fda6be56-9a51-4478-84f5-f115c98103c0","year":2023},"citing_paper":{"arxiv_id":"2506.17350","last_updated":"2025-06-20T00:47:30Z","snapshot_observed_at":"2026-08-17T07:25:35.475674Z","submitted_at":"2025-06-20T00:47:30Z","title":"CUBA: Controlled Untargeted Backdoor Attack against Deep Neural Networks","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-15T19:26:17.942947Z"},"links":{"citing_paper":"/paper/2506.17350"},"observation_digest":"sha256:b6d280107a276574c4eaa59565e79b6e31e3cbcba525e361a9dcec985302e4f1","observation_id":"a06053d6-96d2-4113-95de-a34f2ff6e77a","resolution":{"observed_at":"2026-08-15T19:26:18.150600Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T19:26:18.134635Z","title":"Towards robustness evaluation of backdoor defense on quantized deep learning models,","venue":null,"work_id":"1a02f392-abcf-4d42-a813-ea2a838c0630","year":2024},"citing_paper":{"arxiv_id":"2506.17350","last_updated":"2025-06-20T00:47:30Z","snapshot_observed_at":"2026-08-17T07:25:35.475674Z","submitted_at":"2025-06-20T00:47:30Z","title":"CUBA: Controlled Untargeted Backdoor Attack against Deep Neural Networks","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-15T19:26:17.946417Z"},"links":{"citing_paper":"/paper/2506.17350"},"observation_digest":"sha256:ef3ced509eb9f5af9fa674d4705576ce33a4d1e2be9835df87f72f3658bcba1d","observation_id":"c08cf161-bb3d-4665-ab39-0d01a0400329","resolution":{"observed_at":"2026-08-15T19:26:18.138564Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T19:26:18.122455Z","title":"U-Net: Convolutional net- works for biomedical image segmentation,","venue":null,"work_id":"de5109e9-a788-46e8-bb8a-1a0ecc041fe8","year":2015},"citing_paper":{"arxiv_id":"2506.17350","last_updated":"2025-06-20T00:47:30Z","snapshot_observed_at":"2026-08-17T07:25:35.475674Z","submitted_at":"2025-06-20T00:47:30Z","title":"CUBA: Controlled Untargeted Backdoor Attack against Deep Neural Networks","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-15T19:26:17.949976Z"},"links":{"citing_paper":"/paper/2506.17350"},"observation_digest":"sha256:0e04cb940d981beb281d1f51d764d1fd1a79e3aeef5be09659830ac961ed1374","observation_id":"59830b2b-6b70-4e3c-9fbd-44f45b9b4b15","resolution":{"observed_at":"2026-08-15T19:26:18.126727Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T19:26:17.953183Z","title":"The mnist database of handwritten digit images for machine learning research,","venue":null,"work_id":null,"year":2012},"citing_paper":{"arxiv_id":"2506.17350","last_updated":"2025-06-20T00:47:30Z","snapshot_observed_at":"2026-08-17T07:25:35.475674Z","submitted_at":"2025-06-20T00:47:30Z","title":"CUBA: Controlled Untargeted Backdoor Attack against Deep Neural Networks","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-15T19:26:17.953183Z"},"links":{"citing_paper":"/paper/2506.17350"},"observation_digest":"sha256:6466a04a0c14b90183198e4dc4f1dfa4724096f029df8610e5996a280889d5e5","observation_id":"f0484c38-1bb4-48cf-8ebe-8b73e3439595","resolution":{"observed_at":"2026-08-15T19:26:17.953183Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T19:26:17.956803Z","title":"Detection of traffic signs in real-world images: The German Traffic Sign Detection Benchmark,","venue":null,"work_id":null,"year":2013},"citing_paper":{"arxiv_id":"2506.17350","last_updated":"2025-06-20T00:47:30Z","snapshot_observed_at":"2026-08-17T07:25:35.475674Z","submitted_at":"2025-06-20T00:47:30Z","title":"CUBA: Controlled Untargeted Backdoor Attack against Deep Neural Networks","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-15T19:26:17.956803Z"},"links":{"citing_paper":"/paper/2506.17350"},"observation_digest":"sha256:397e1832f39a7da0b3d7a844b769757eecaa9cf2dd4a166b5fbce58551e110c2","observation_id":"3debdc29-c35b-4cab-a212-50f5c4a72d2b","resolution":{"observed_at":"2026-08-15T19:26:17.956803Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T19:26:18.096575Z","title":"Identity mappings in deep residual networks,","venue":null,"work_id":"9be06085-65c8-44b4-aea4-92f5775a4ae9","year":2016},"citing_paper":{"arxiv_id":"2506.17350","last_updated":"2025-06-20T00:47:30Z","snapshot_observed_at":"2026-08-17T07:25:35.475674Z","submitted_at":"2025-06-20T00:47:30Z","title":"CUBA: Controlled Untargeted Backdoor Attack against Deep Neural Networks","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-15T19:26:17.960160Z"},"links":{"citing_paper":"/paper/2506.17350"},"observation_digest":"sha256:12c2ecc56351b7edb33cc18f96692f5dfbb4a52b832cbf0489a15fd9d8558183","observation_id":"ca268f98-6f0b-4c6f-a2b3-ddff743f1977","resolution":{"observed_at":"2026-08-15T19:26:18.100369Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T19:26:17.963483Z","title":"Learning multiple layers of features from tiny images,","venue":null,"work_id":null,"year":2009},"citing_paper":{"arxiv_id":"2506.17350","last_updated":"2025-06-20T00:47:30Z","snapshot_observed_at":"2026-08-17T07:25:35.475674Z","submitted_at":"2025-06-20T00:47:30Z","title":"CUBA: Controlled Untargeted Backdoor Attack against Deep Neural Networks","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-15T19:26:17.963483Z"},"links":{"citing_paper":"/paper/2506.17350"},"observation_digest":"sha256:38dda932e30408eb391be2842fb2ba49ef22dc68f559cb775693667536e87b68","observation_id":"3227d4c1-f2a5-4fe3-a9aa-fc6a4aeeff1d","resolution":{"observed_at":"2026-08-15T19:26:17.963483Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T19:26:18.076029Z","title":"Deep residual learning for image recognition,","venue":null,"work_id":"b12b31a0-b0d7-4a15-b904-8a3e3cf85eb3","year":2016},"citing_paper":{"arxiv_id":"2506.17350","last_updated":"2025-06-20T00:47:30Z","snapshot_observed_at":"2026-08-17T07:25:35.475674Z","submitted_at":"2025-06-20T00:47:30Z","title":"CUBA: Controlled Untargeted Backdoor Attack against Deep Neural Networks","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-15T19:26:17.966963Z"},"links":{"citing_paper":"/paper/2506.17350"},"observation_digest":"sha256:0fe5ee08a60f66b5ad394cf71133fa59eac62b87ee7e74df39695b75aa80e904","observation_id":"a70d18c4-448c-492c-b1d9-d5a61bb08f5a","resolution":{"observed_at":"2026-08-15T19:26:18.081273Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T19:26:18.063551Z","title":"Grad-CAM: Visual explanations from deep networks via gradient-based localization,","venue":null,"work_id":"7f3f892c-129f-45ea-bbbd-4f2521d77b7a","year":2017},"citing_paper":{"arxiv_id":"2506.17350","last_updated":"2025-06-20T00:47:30Z","snapshot_observed_at":"2026-08-17T07:25:35.475674Z","submitted_at":"2025-06-20T00:47:30Z","title":"CUBA: Controlled Untargeted Backdoor Attack against Deep Neural Networks","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-15T19:26:17.970191Z"},"links":{"citing_paper":"/paper/2506.17350"},"observation_digest":"sha256:9e756266d7616b57d01736129f21b3753a076d5f354ead373a7e7da405e43f98","observation_id":"85846aa3-81f4-4b72-969e-8819f547b324","resolution":{"observed_at":"2026-08-15T19:26:18.067839Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T19:26:18.049908Z","title":"Fine-pruning: Defending against backdooring attacks on deep neural networks,","venue":null,"work_id":"4a7643c1-8dd1-41e9-8a22-5f2d27136d11","year":2018},"citing_paper":{"arxiv_id":"2506.17350","last_updated":"2025-06-20T00:47:30Z","snapshot_observed_at":"2026-08-17T07:25:35.475674Z","submitted_at":"2025-06-20T00:47:30Z","title":"CUBA: Controlled Untargeted Backdoor Attack against Deep Neural Networks","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-15T19:26:17.973568Z"},"links":{"citing_paper":"/paper/2506.17350"},"observation_digest":"sha256:012640cb274acb9b475ad9584ef17c933d80f95ea4f17b4ecc11ce5287f261e4","observation_id":"76d79b70-83d3-4d27-93c8-dc4bd50b44bd","resolution":{"observed_at":"2026-08-15T19:26:18.054941Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T19:26:18.037726Z","title":"Neural attention distillation: Erasing backdoor triggers from deep neural networks,","venue":null,"work_id":"0e86a4e7-7d54-4235-a854-db990f5815c7","year":2021},"citing_paper":{"arxiv_id":"2506.17350","last_updated":"2025-06-20T00:47:30Z","snapshot_observed_at":"2026-08-17T07:25:35.475674Z","submitted_at":"2025-06-20T00:47:30Z","title":"CUBA: Controlled Untargeted Backdoor Attack against Deep Neural Networks","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-15T19:26:17.976802Z"},"links":{"citing_paper":"/paper/2506.17350"},"observation_digest":"sha256:e24bddd27fb6122f101d9126e9acf8730ed3ba0b2b1338390e606fc46c01616f","observation_id":"966e5d22-3f17-4081-b672-4ca1ecfed532","resolution":{"observed_at":"2026-08-15T19:26:18.041696Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T19:26:18.025650Z","title":"Untargeted backdoor attack against deep neural networks with imperceptible trig- ger,","venue":null,"work_id":"6d88b950-a7f2-4ea8-93b0-8e0484feda53","year":2024},"citing_paper":{"arxiv_id":"2506.17350","last_updated":"2025-06-20T00:47:30Z","snapshot_observed_at":"2026-08-17T07:25:35.475674Z","submitted_at":"2025-06-20T00:47:30Z","title":"CUBA: Controlled Untargeted Backdoor Attack against Deep Neural Networks","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-15T19:26:17.980177Z"},"links":{"citing_paper":"/paper/2506.17350"},"observation_digest":"sha256:7acee0efc27bc7ca2295770848e8a2c7f628bef616cff4e043939eb25826550e","observation_id":"5c34acfc-756f-47a3-a449-90ac66f294a7","resolution":{"observed_at":"2026-08-15T19:26:18.029966Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T19:26:18.011635Z","title":"Shortcut learning in deep neural networks,","venue":null,"work_id":"2575854a-93c2-450b-b11a-36550b6efb91","year":2020},"citing_paper":{"arxiv_id":"2506.17350","last_updated":"2025-06-20T00:47:30Z","snapshot_observed_at":"2026-08-17T07:25:35.475674Z","submitted_at":"2025-06-20T00:47:30Z","title":"CUBA: Controlled Untargeted Backdoor Attack against Deep Neural Networks","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-15T19:26:17.983977Z"},"links":{"citing_paper":"/paper/2506.17350"},"observation_digest":"sha256:4e4044da1c20df8090dd45e79785f8043df813c39c8c84fea0e1a3482cb7d365","observation_id":"d4b0de3e-0ea6-43ed-b949-76fad8ba6598","resolution":{"observed_at":"2026-08-15T19:26:18.017102Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2506.17350","last_updated":"2025-06-20T00:47:30Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-17T07:25:35.475674Z","submitted_at":"2025-06-20T00:47:30Z","title":"CUBA: Controlled Untargeted Backdoor Attack against Deep Neural Networks"},"reference_resolution":{"displayed":46,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":3,"verified_exact":0,"verified_fuzzy":43},"total_outbound_references":46},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"thesis":"As of 18 August 2026, this Paper Citation Record lists 46 of 46 outbound references and 1 inbound Pith citation observation for arXiv:2506.17350."}