{"as_of":"2026-08-10T18:46:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:03ebff2ffe76a66e1d3000a5b3df83c55b6c02ecfc0bf27b41a306b98c87df46","coverage":[{"denominator":107,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":100,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-06T21:50:30.639123Z","state":"measured"},{"denominator":100,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":100,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-10T06:31:04.303077+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2506.23296/citation-record","integrity":"/paper/2506.23296/integrity","json":"/paper/2506.23296/citation-record.json","paper":"/paper/2506.23296"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:20.988268Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-10T12:16:42.797724Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:20.988268Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:3cacb33c5581c7015eff55fd090a7982d08b0a9239c2bdb3c9ed5359e7a9d5bb","observation_id":"2b38b47d-dd62-4f3f-adcb-e23e48c9fe9c","resolution":{"observed_at":"2026-08-06T21:50:20.988268Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:21.073555Z","title":null,"venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-10T12:16:42.797724Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:21.073555Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:00f4d80a6848e324e36012d3527dd7f1eee66478db0c449d38b17280e6ad4265","observation_id":"f1be1799-acee-44e3-bf34-e919c1eaa0f2","resolution":{"observed_at":"2026-08-06T21:50:21.073555Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.1007/s10462-021-10125-w","metadata_source":"openalex","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T00:03:40.895421Z","title":null,"venue":"Artificial Intelligence Review","work_id":"99ffe6f9-7ea0-4a78-a4aa-8f826697d332","year":2022},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-10T12:16:42.797724Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:21.188556Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:e41086c16de429c5a5568da741f9beddb048e571f0c637e15ef0342eb2a2f326","observation_id":"a3ab3e34-ab4a-46e2-95e2-41b5b258695a","resolution":{"observed_at":"2026-08-06T21:50:31.966672Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2015.07182","doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:34.990978Z","title":"Mancini, Angelo Spognardi, Antonio Villani, Domenico Vitali, and Giovanni Felici","venue":null,"work_id":"6eeb447d-5c23-4204-915d-ec832cf79f0e","year":2015},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-10T12:16:42.797724Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:21.299304Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:7343b22afca938d1ca5b60497fa9ba772f38af54196692ee74eb211ac1929e2b","observation_id":"83928b71-ac57-481c-801e-c329c73cee83","resolution":{"observed_at":"2026-08-06T21:50:35.083027Z","resolver_source":"raw_fallback","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2305.03350","last_updated":"2023-05-05T08:11:00Z","snapshot_observed_at":"2026-08-08T01:47:52.928549Z","submitted_at":"2023-05-05T08:11:00Z","title":"Reconstructing Training Data from Multiclass Neural Networks","version":1},"cited_work":{"arxiv_id":"2305.03350","doi":null,"metadata_source":"pith","pith_arxiv_id":"2305.03350","snapshot_observed_at":"2026-08-06T21:50:34.734837Z","title":"Reconstructing Training Data from Multiclass Neural Networks","venue":"cs.LG","work_id":"1e058c37-fca0-43bb-abc0-3cfdec428373","year":2023},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-10T12:16:42.797724Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:21.601566Z"},"links":{"cited_paper":"/paper/2305.03350","citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:83b801c917160ca87a07ff968716d45c3f8c13121b2cf17f2a222136401350e2","observation_id":"50a39457-de37-4b31-a45c-a7fc9595641a","resolution":{"observed_at":"2026-08-06T21:50:34.801042Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:21.716396Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-10T12:16:42.797724Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:21.716396Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:ed47b68cb75532b7e657efd7d8f4e5cd397f8920c1cc3ac45def08261d9b4c1b","observation_id":"67712711-d93e-4f1d-8bd7-ed4ee64cdc26","resolution":{"observed_at":"2026-08-06T21:50:21.716396Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:21.840644Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-10T12:16:42.797724Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:21.840644Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:8f97e78639f7bf3d1d0ef50adb0bb16f3e475247f4fb472daf3511922101917f","observation_id":"5e78e5a4-f0f9-4fcb-b79d-16d8dbab4b41","resolution":{"observed_at":"2026-08-06T21:50:21.840644Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:21.944155Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-10T12:16:42.797724Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:21.944155Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:f8ee8e041b60bde78e364981c6b4675c3c0cf5fac42de7dbe573115111ef71ea","observation_id":"3cdfb5e1-b14d-46f5-a9bf-6fdd3152a95c","resolution":{"observed_at":"2026-08-06T21:50:21.944155Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:22.073958Z","title":null,"venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-10T12:16:42.797724Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:22.073958Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:4fc49f54c1351b80001418eaffa0739947016f35c703eeec636cb74956e042c4","observation_id":"e4a8db94-a0bf-4d47-a344-8d90823ac3ba","resolution":{"observed_at":"2026-08-06T21:50:22.073958Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:22.159850Z","title":"Choquette-Choo, Matthew Jagielski, Irena Gao, Pang Wei W Koh, Daphne Ippolito, Florian Tramer, and Ludwig Schmidt","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-10T12:16:42.797724Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:22.159850Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:727856f72d77810d85aa21443f00d0657875b374a4b5c369344b9e14fee118c9","observation_id":"003e5efd-9537-4380-9a58-d57d6da71e0e","resolution":{"observed_at":"2026-08-06T21:50:22.159850Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:22.259245Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-10T12:16:42.797724Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:22.259245Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:ba2f7c67b13f3b173fdff42513b8c4a5fcec906838a071554701890f6bdb2933","observation_id":"3d893a9f-df9c-4c97-81a0-c4145fddc7ad","resolution":{"observed_at":"2026-08-06T21:50:22.259245Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:22.426887Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-10T12:16:42.797724Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:22.426887Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:5e578f1b955aefe1c6f511b305cc899ac772f70cfe56cc2e2ad059c2d8be3ebe","observation_id":"1d37d4a2-d885-43a3-9220-479abb4761c6","resolution":{"observed_at":"2026-08-06T21:50:22.426887Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:22.550382Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-10T12:16:42.797724Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:22.550382Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:675a0f7066f9fc13ce2972ae5692c231c77d8567c14ea47978547dd3c3210d91","observation_id":"1f9fec0e-9696-456f-b07b-618e9d2245d5","resolution":{"observed_at":"2026-08-06T21:50:22.550382Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.08419","last_updated":"2024-07-18T18:24:57Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-10-12T15:38:28Z","title":"Jailbreaking Black Box Large Language Models in Twenty Queries","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.08419","snapshot_observed_at":"2026-08-06T21:50:22.646283Z","title":"Pappas, and Eric Wong","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-10T12:16:42.797724Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:22.646283Z"},"links":{"cited_paper":"/paper/2310.08419","citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:af73c25e2eaca4a15ff564ddaa9723a9edc21a08af1aa5143f0cf46755f75d7f","observation_id":"424f6e11-f56d-4d67-9b4b-b00b937b29ce","resolution":{"observed_at":"2026-08-06T21:50:22.646283Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.1145/3638531","metadata_source":"openalex","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T05:30:23.456663Z","title":"Ali Babar","venue":"ACM Computing Surveys","work_id":"a8049557-8007-4324-90da-9763c9a65619","year":2024},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-10T12:16:42.797724Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:22.735538Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:e73101d067382f0bb6f6a167f2ebcfb012edbb89a706246f3de9da07f4a3a8b6","observation_id":"c99d5963-4875-4ae5-be2e-5df37985e73d","resolution":{"observed_at":"2026-08-06T21:50:31.772235Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:22.839615Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-10T12:16:42.797724Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:22.839615Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:11b8af3c496f0aac9bbe458c7db1ef60e72e8eddf77a7a7aca499297af9b17ce","observation_id":"fda68c38-06a8-44ef-9e18-e65af1772f11","resolution":{"observed_at":"2026-08-06T21:50:22.839615Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2203.08147","last_updated":"2025-04-18T12:28:58Z","snapshot_observed_at":"2026-07-06T12:48:16.632982Z","submitted_at":"2022-03-14T17:18:10Z","title":"Energy-Latency Attacks via Sponge Poisoning","version":5},"cited_work":{"arxiv_id":"2203.08147","doi":null,"metadata_source":"pith","pith_arxiv_id":"2203.08147","snapshot_observed_at":"2026-08-06T21:50:34.501590Z","title":"Energy-Latency Attacks via Sponge Poisoning","venue":"cs.CR","work_id":"7863539c-f9d6-425d-a36f-4b14eaa79db5","year":2022},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-10T12:16:42.797724Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:22.937021Z"},"links":{"cited_paper":"/paper/2203.08147","citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:c9caaac17b52d3fcba25b734c883818a81458c05bb94e972d84f238a40447df5","observation_id":"3bf6cb87-28bb-4030-bc83-8d77b80aadee","resolution":{"observed_at":"2026-08-06T21:50:34.554963Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:23.063903Z","title":"Berriel, Claudine Badue, Alberto F","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-10T12:16:42.797724Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:23.063903Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:fff1d5df61ae6adf52e7bd7dd975a8dc9374e938db107ce5e290dfcd0b2cb482","observation_id":"8ab122fa-2288-4267-b366-24ad1b1b9c45","resolution":{"observed_at":"2026-08-06T21:50:23.063903Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:23.222198Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-10T12:16:42.797724Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:23.222198Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:06b31bfc88f17170af396cfcedf8c8328c5aadad3006348c43d2b5cea76a71f1","observation_id":"4fefe178-ac92-4352-aa1f-02cf5368adcb","resolution":{"observed_at":"2026-08-06T21:50:23.222198Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:23.292430Z","title":"Hadi Amini, and Yanzhao Wu","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-10T12:16:42.797724Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:23.292430Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:1c9934fef83cffc89c1eed1e02ad12ccb1e1decaa5bd8d01121f01dc36e42743","observation_id":"a432533b-0389-4eea-a2d6-0a6b934f8582","resolution":{"observed_at":"2026-08-06T21:50:23.292430Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:23.411176Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-10T12:16:42.797724Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:23.411176Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:3f4a7a90bbe7a9aa746ff2e374041e7e0097da94ca1bd38230be2f7d13c88bdc","observation_id":"ac79abb5-3f31-4efe-9579-c7c3765cbd5c","resolution":{"observed_at":"2026-08-06T21:50:23.411176Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:23.529931Z","title":null,"venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-10T12:16:42.797724Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:23.529931Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:250ff5912897e42f467a12eee86152aa8ee36deaf262d16d0f3274345723c3ba","observation_id":"b0b52106-6536-4ac7-a053-de6032fb5a4e","resolution":{"observed_at":"2026-08-06T21:50:23.529931Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:23.612283Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-10T12:16:42.797724Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:23.612283Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:1ca50dcd7cc8ac1fb0f4f0c474bba35026e602189bd40b3537e68fd16cab747b","observation_id":"c02ac1c0-145a-4584-8458-4c94e94e1934","resolution":{"observed_at":"2026-08-06T21:50:23.612283Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:23.681904Z","title":null,"venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-10T12:16:42.797724Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:23.681904Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:4c98493e3783802042abff24df3d0115dc344c1c565dbe69dbb1009342fa490a","observation_id":"4a215271-7d51-4811-bd30-dca16aac678b","resolution":{"observed_at":"2026-08-06T21:50:23.681904Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:23.718464Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-10T12:16:42.797724Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:23.718464Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:3577b5739f460193912caa795f9786d3047af1b2ba325d1c84d5ad3d118c6c5c","observation_id":"fe249f1e-66b3-46ac-b055-f9160b953dff","resolution":{"observed_at":"2026-08-06T21:50:23.718464Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:23.811217Z","title":null,"venue":null,"work_id":null,"year":2015},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-10T12:16:42.797724Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:23.811217Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:7f7ae449d391e756b51c05454caed112fd2d3efd6e7ff6dcdea09c6f191bc03d","observation_id":"e7e30aab-fc8d-4183-aed1-759ebb9a6ea4","resolution":{"observed_at":"2026-08-06T21:50:23.811217Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:23.930755Z","title":"Gunter, and Nikita Borisov","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-10T12:16:42.797724Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:23.930755Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:14b8675107ef48dcc2329149c895d737b9ef4f2368979606155c7bfad8389c32","observation_id":"06c0c4aa-c99b-4216-9322-6d7c62acf30a","resolution":{"observed_at":"2026-08-06T21:50:23.930755Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1412.6572","last_updated":"2015-03-20T20:19:16Z","snapshot_observed_at":"2026-07-06T04:04:16.777653Z","submitted_at":"2014-12-20T01:17:12Z","title":"Explaining and Harnessing Adversarial Examples","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1412.6572","snapshot_observed_at":"2026-08-06T21:50:24.040838Z","title":"Goodfellow, Jonathon Shlens, and Christian Szegedy","venue":null,"work_id":null,"year":2015},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-10T12:16:42.797724Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:24.040838Z"},"links":{"cited_paper":"/paper/1412.6572","citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:e2709bae8072d8f09094bacaced5de1b53492450ee98c9702d98b1c4e7ca723b","observation_id":"51153b1d-52fb-44be-892a-875ab09493b6","resolution":{"observed_at":"2026-08-06T21:50:24.040838Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:24.108440Z","title":null,"venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-10T12:16:42.797724Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:24.108440Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:a0aabdfed34f7097662b52c10955943835275e9eefce2f3f050797b21f6149ac","observation_id":"3737ee73-2ba6-4611-9366-baf74ddbab81","resolution":{"observed_at":"2026-08-06T21:50:24.108440Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:24.189844Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-10T12:16:42.797724Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:24.189844Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:f8600675a504463d7de09f5bdef04fc8539357083d9058ff401256902c09df03","observation_id":"e51fff14-9021-46d6-b3cc-3d0b7c9f1f2c","resolution":{"observed_at":"2026-08-06T21:50:24.189844Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:24.261915Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-10T12:16:42.797724Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:24.261915Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:5909a494bc181e1be5470656866e412a74165e47e513091243e2f70216ef4ef6","observation_id":"b77b2213-50e1-4d6f-9946-0f66ed7e67cc","resolution":{"observed_at":"2026-08-06T21:50:24.261915Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"file/9069273","doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:34.070592Z","title":null,"venue":null,"work_id":"9f8fa973-a957-4743-a992-c57b69706a1d","year":2022},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-10T12:16:42.797724Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:24.380832Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:7764e617a38b29c9cd60c1adb428df07c351bf9858c2d808df4293d01fdc035a","observation_id":"9b40be03-a142-4a35-bc18-b95101a00fea","resolution":{"observed_at":"2026-08-06T21:50:34.112191Z","resolver_source":"raw_fallback","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:24.501579Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-10T12:16:42.797724Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:24.501579Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:f74311cfe942ddd7e93ae0c46c1d60f06bf6d99387f0962f117aa0be0fac4f20","observation_id":"3a61a07a-0f63-4b05-9b16-cc49701cb69b","resolution":{"observed_at":"2026-08-06T21:50:24.501579Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:24.594005Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-10T12:16:42.797724Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:24.594005Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:9485d05faf5cb2ec395c8c78ae2d62c5f6fb0add41793abdc9cb72ff83a19b5c","observation_id":"ea033ab5-46cf-47b9-89c4-9a8fd2cadd63","resolution":{"observed_at":"2026-08-06T21:50:24.594005Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:24.687846Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-10T12:16:42.797724Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:24.687846Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:e5c3516d3ed65865fa07dcdc0cd0740c3ea80e2d9384530c3c20c07dacd401c1","observation_id":"8c40ce3f-2564-474a-be71-6894444fbb9d","resolution":{"observed_at":"2026-08-06T21:50:24.687846Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:24.807049Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-10T12:16:42.797724Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:24.807049Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:2cd988b9ce94d734e0801f8f43824594ec9a54326c51e81cd93f857fe40dd12f","observation_id":"532aa503-ebb5-4fef-b714-a9025fcc1ed5","resolution":{"observed_at":"2026-08-06T21:50:24.807049Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:24.901340Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-10T12:16:42.797724Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:24.901340Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:6024e1d0fbc592cc8e465de394a67e43b6abe09aa00cd7445eb8a1114def928c","observation_id":"e7c5cf82-6729-4df4-8d9d-fd67ec401788","resolution":{"observed_at":"2026-08-06T21:50:24.901340Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:25.052983Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-10T12:16:42.797724Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:25.052983Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:fe53fd941b638ff193c64759f1f0fd939f3aa17e3b5ab67c6bde21e9215d540d","observation_id":"650a378c-e545-4706-bb1d-22e2ef054f18","resolution":{"observed_at":"2026-08-06T21:50:25.052983Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:25.121350Z","title":null,"venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-10T12:16:42.797724Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:25.121350Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:817dbca3316393078a632411c24ec6c7b45c83c8bd038e0b974655e76041f7be","observation_id":"566576a0-48c8-49a5-8f0c-c5b7c3a650bb","resolution":{"observed_at":"2026-08-06T21:50:25.121350Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:25.217196Z","title":null,"venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-10T12:16:42.797724Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:25.217196Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:84572198469f2bf9fbbad1bab6fa827e48b807c062eca4e661290b993bee971f","observation_id":"11fade70-b816-4b2d-8ad2-f6b52b9336c6","resolution":{"observed_at":"2026-08-06T21:50:25.217196Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2301.07474","last_updated":"2023-01-19T02:43:05Z","snapshot_observed_at":"2026-08-04T23:08:26.910062Z","submitted_at":"2023-01-18T12:32:51Z","title":"Threats, Vulnerabilities, and Controls of Machine Learning Based Systems: A Survey and Taxonomy","version":2},"cited_work":{"arxiv_id":"2301.07474","doi":null,"metadata_source":"pith","pith_arxiv_id":"2301.07474","snapshot_observed_at":"2026-08-06T21:50:33.818372Z","title":"Threats, Vulnerabilities, and Controls of Machine Learning Based Systems: A Survey and Taxonomy","venue":"cs.CR","work_id":"619583a1-3caa-4b50-95ef-a96d0df5ca72","year":2023},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-10T12:16:42.797724Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:25.299426Z"},"links":{"cited_paper":"/paper/2301.07474","citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:c01fab5e7b68c93a9f0a5cbca9f9be4d2159e8cc2525311ad1081c9784c3ce15","observation_id":"1c16d194-8743-4947-95e7-93c88f9d093c","resolution":{"observed_at":"2026-08-06T21:50:33.851554Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.1155/2021/4907754","metadata_source":"openalex","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T05:30:23.456663Z","title":null,"venue":"Wireless Communications and Mobile Computing","work_id":"d14ae359-8ca1-49bc-9352-a3a670779450","year":2021},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-10T12:16:42.797724Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:25.393827Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:f68713345d1d4ce3467337f19d1d899f4214b608bb46067b306f66cd7adfb8d2","observation_id":"587e6a35-7274-4e7d-b82e-cbe0da093658","resolution":{"observed_at":"2026-08-06T21:50:31.583565Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:25.505303Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-10T12:16:42.797724Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:25.505303Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:b4ee31f4714cbcd66863e9f2dd576abbdd6bfdbb9660c487c2e6f3aa87a4c84c","observation_id":"0e26f8a6-4bfe-4656-8860-1d0bc26b3dd7","resolution":{"observed_at":"2026-08-06T21:50:25.505303Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:25.591286Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-10T12:16:42.797724Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:25.591286Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:a8e82748b50be7440a5925630aeb98bd3d9535a98ca9e25683bdfb3609cac7e9","observation_id":"a42f4f4e-6f22-4820-a443-be27743d3cee","resolution":{"observed_at":"2026-08-06T21:50:25.591286Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:25.825923Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-10T12:16:42.797724Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:25.825923Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:2dc11f7b44e5b4f57c02a3ccdb7194500532ed6fb8bb83cbf75867e0b5feb51a","observation_id":"7e77f442-1b27-4f9d-81b1-fd8ec1c3a6d3","resolution":{"observed_at":"2026-08-06T21:50:25.825923Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:25.945814Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-10T12:16:42.797724Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:25.945814Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:413be902a5bcd28a88360e0f6b05434768507049a092231db798ded20f388b38","observation_id":"617bf4db-dfe6-451c-8217-c6591df8d616","resolution":{"observed_at":"2026-08-06T21:50:25.945814Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2306.05499","last_updated":"2025-12-29T02:25:27Z","snapshot_observed_at":"2026-07-06T15:40:27.639368Z","submitted_at":"2023-06-08T18:43:11Z","title":"Prompt Injection attack against LLM-integrated Applications","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2306.05499","snapshot_observed_at":"2026-08-06T21:50:26.038139Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-10T12:16:42.797724Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:26.038139Z"},"links":{"cited_paper":"/paper/2306.05499","citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:bd83ff0519e96b7457bdf567c05bb6f8d430f2e86a19a8f062bb5f75440fe8e0","observation_id":"957d2a41-837a-4075-9b19-a7b276233cfb","resolution":{"observed_at":"2026-08-06T21:50:26.038139Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:26.155456Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-10T12:16:42.797724Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:26.155456Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:0272bf3f33ee8c901709696a42bd7eaf4c42034d2c8bd9c3f08d72b52e703fc9","observation_id":"dd98af69-5183-4497-a10f-0a718e3fd3c2","resolution":{"observed_at":"2026-08-06T21:50:26.155456Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1802.04889","last_updated":"2018-02-13T23:05:05Z","snapshot_observed_at":"2026-08-10T04:50:03.712208Z","submitted_at":"2018-02-13T23:05:05Z","title":"Understanding Membership Inferences on Well-Generalized Learning Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1802.04889","snapshot_observed_at":"2026-08-06T21:50:26.251144Z","title":"Gunter, and Kai Chen","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-10T12:16:42.797724Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:26.251144Z"},"links":{"cited_paper":"/paper/1802.04889","citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:6713819f13923137aef443985d707a683e2dfa6bb7095a6ecc8cdc8a196a2176","observation_id":"22d614df-7206-45f1-b224-4c2d92881d95","resolution":{"observed_at":"2026-08-06T21:50:26.251144Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:26.342631Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-10T12:16:42.797724Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:26.342631Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:3bb57f40f1b73fe683a4170594f87af6bcab3d4f0c133d656f394367fc6d47a7","observation_id":"43ee58c1-55d4-4160-bd86-43ca84517afa","resolution":{"observed_at":"2026-08-06T21:50:26.342631Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2019.23415","doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:33.486832Z","title":null,"venue":null,"work_id":"c8bf1cb5-0e62-4ac7-b388-62f006587821","year":2019},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-10T12:16:42.797724Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:26.440855Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:332bf13a4377b89675078b58b5f9145d7a815b7cd4a5d6ec77efce4bc3a1c886","observation_id":"b9504942-a50a-4f92-bfe4-0c3c2d10962b","resolution":{"observed_at":"2026-08-06T21:50:33.579984Z","resolver_source":"raw_fallback","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:26.520084Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-10T12:16:42.797724Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:26.520084Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:cc77453fe247b2f3b68f66e728d4b84d6d5254a90578c6486b9bc44d6ee53ff8","observation_id":"96aa9fb0-8cf8-4cfb-bd21-5184315a0112","resolution":{"observed_at":"2026-08-06T21:50:26.520084Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2312.02119","last_updated":"2024-10-31T15:57:42Z","snapshot_observed_at":"2026-07-06T16:56:46.051958Z","submitted_at":"2023-12-04T18:49:23Z","title":"Tree of Attacks: Jailbreaking Black-Box LLMs Automatically","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.02119","snapshot_observed_at":"2026-08-06T21:50:26.604358Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-10T12:16:42.797724Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:26.604358Z"},"links":{"cited_paper":"/paper/2312.02119","citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:17ae4f3c8d6bd515c8522195e48fe5d0c53cc4d13a67983010068ad6ae91d412","observation_id":"e3ee3bc5-a349-4304-b988-48a3398a16cd","resolution":{"observed_at":"2026-08-06T21:50:26.604358Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:26.692643Z","title":null,"venue":null,"work_id":null,"year":2013},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-10T12:16:42.797724Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:26.692643Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:21df5d88ac516d99456d230f4d1663bca454288951e300cc7badde9ade773d7e","observation_id":"f93f49fe-5a16-4d5e-aeca-90bd70ff60d7","resolution":{"observed_at":"2026-08-06T21:50:26.692643Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:26.743564Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-10T12:16:42.797724Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:26.743564Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:d77fdb80a1439979c2e015f98c568951b8b5ca9b099b0637c39fce5d30115088","observation_id":"8add8e05-bafc-48cb-aa2b-a517a0da9e18","resolution":{"observed_at":"2026-08-06T21:50:26.743564Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2007.09339","last_updated":"2020-07-18T06:21:35Z","snapshot_observed_at":"2026-08-09T16:12:30.056905Z","submitted_at":"2020-07-18T06:21:35Z","title":"ML Privacy Meter: Aiding Regulatory Compliance by Quantifying the Privacy Risks of Machine Learning","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2007.09339","snapshot_observed_at":"2026-08-06T21:50:26.839728Z","title":null,"venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-10T12:16:42.797724Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":58,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:26.839728Z"},"links":{"cited_paper":"/paper/2007.09339","citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:5beb29d291ebefc404ac73e401db301a4b60bceb492012c8d78b01b7f7c9c4a7","observation_id":"44722f7a-4e19-4a2a-83f5-9ccb9c440d8e","resolution":{"observed_at":"2026-08-06T21:50:26.839728Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:26.901705Z","title":null,"venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-10T12:16:42.797724Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":59,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:26.901705Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:fd546d8f9ecaf1aa5664ea688c8b829405e0cd5afbed19672c5bc68c01b648f4","observation_id":"0a70863b-d38c-41a7-95bd-21d97bcca3ca","resolution":{"observed_at":"2026-08-06T21:50:26.901705Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:26.961268Z","title":"Khasawneh, and Houman Homayoun","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-10T12:16:42.797724Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":60,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:26.961268Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:9082d5765918d2d15b93c8b39d874a8fa234c85b717ccccb69bf56da84329409","observation_id":"be920142-7765-4c8b-ac4f-4a10607ad0cd","resolution":{"observed_at":"2026-08-06T21:50:26.961268Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1807.01069","last_updated":"2019-11-15T15:05:57Z","snapshot_observed_at":"2026-08-10T13:43:07.043677Z","submitted_at":"2018-07-03T10:25:26Z","title":"Adversarial Robustness Toolbox v1.0.0","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1807.01069","snapshot_observed_at":"2026-08-06T21:50:27.050580Z","title":"Molloy, and Ben Edwards","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-10T12:16:42.797724Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":61,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:27.050580Z"},"links":{"cited_paper":"/paper/1807.01069","citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:990c37e0146776b5f3357e12ba03a10c88f1444ca916288ae99022e86710a527","observation_id":"c42ebb42-a6d2-4e01-8f55-c2fd298bbd5c","resolution":{"observed_at":"2026-08-06T21:50:27.050580Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:27.120521Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-10T12:16:42.797724Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":62,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:27.120521Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:e693123d4f7f3aa6e198951104e04b7fecc0138928a78a4cc7e1d5131211ead4","observation_id":"80215c62-3053-4885-8547-e2c2545ece0f","resolution":{"observed_at":"2026-08-06T21:50:27.120521Z","resolver_source":null,"status":"malformed_identifier"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:27.186373Z","title":"Department of Commerce","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-10T12:16:42.797724Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":63,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:27.186373Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:33601f4fdaaab6c4715721cc3f670e4d6bf023370bb283c5ca5ca82743709753","observation_id":"12f1a340-2718-4fe3-baab-b95bda3a8c92","resolution":{"observed_at":"2026-08-06T21:50:27.186373Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:27.268324Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-10T12:16:42.797724Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":64,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:27.268324Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:84264cb829637ed8f7166e29a3ca51feaac381dd7b9c4eaa972100abde81b9b5","observation_id":"d286f262-56ab-49f1-b49c-1176580044dc","resolution":{"observed_at":"2026-08-06T21:50:27.268324Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:27.342600Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-10T12:16:42.797724Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":65,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:27.342600Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:af22286abec4e68288209009e7b205e0706c50576adb4d922516c8d5e5e62b0f","observation_id":"ab906321-b451-4ae1-aab4-2408d2a1f00f","resolution":{"observed_at":"2026-08-06T21:50:27.342600Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:37.695815Z","title":null,"venue":null,"work_id":"39cfaa77-d166-48f1-9e12-0b9035e91726","year":2023},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-10T12:16:42.797724Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":66,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:27.400827Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:75ea68ffcda51ec2fe17bf7802ac0b8b03d911f781fa33c95193a92b7e9a2a5b","observation_id":"c1f4d3c2-95ac-4bf9-812b-87783d405cac","resolution":{"observed_at":"2026-08-06T21:50:37.784683Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.1007/978-3-030-28954-6_7","metadata_source":"openalex","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T00:03:56.115653Z","title":null,"venue":"Lecture notes in computer science","work_id":"d24b56fd-25c1-422a-943f-33846a58d03f","year":2019},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-10T12:16:42.797724Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":67,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:27.451392Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:40a3aca71bd55b1a21cd97222d8e277e54911969e08e0e0a0460eeb63646971e","observation_id":"c93a0811-56a1-4c33-abb9-ca0017e2e93e","resolution":{"observed_at":"2026-08-06T21:50:31.419820Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:27.535790Z","title":null,"venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-10T12:16:42.797724Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":68,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:27.535790Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:3b035d697a255972fddce6dc68b4212154118825b94155746b02f978fc1a465a","observation_id":"786fba58-42e4-4d1f-9d87-d6cc851a5812","resolution":{"observed_at":"2026-08-06T21:50:27.535790Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2102.04661","last_updated":"2021-02-09T06:06:13Z","snapshot_observed_at":"2026-08-06T16:38:00.577324Z","submitted_at":"2021-02-09T06:06:13Z","title":"Security and Privacy for Artificial Intelligence: Opportunities and Challenges","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2102.04661","snapshot_observed_at":"2026-08-06T21:50:27.608111Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-10T12:16:42.797724Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":69,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:27.608111Z"},"links":{"cited_paper":"/paper/2102.04661","citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:6a1dc1927ef06d58ae8105a001c87c53c4a01673f3a8901018c5fa753144d9fa","observation_id":"a0f5cfdd-9be7-4f0b-9bb0-af5f760ca23b","resolution":{"observed_at":"2026-08-06T21:50:27.608111Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1610.00768","last_updated":"2018-06-27T21:06:06Z","snapshot_observed_at":"2026-07-06T05:13:12.777844Z","submitted_at":"2016-10-03T22:04:07Z","title":"Technical Report on the CleverHans v2.1.0 Adversarial Examples Library","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1610.00768","snapshot_observed_at":"2026-08-06T21:50:27.662686Z","title":null,"venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-10T12:16:42.797724Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":70,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:27.662686Z"},"links":{"cited_paper":"/paper/1610.00768","citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:919edfc1527d55142dd9f6e377b9fd251d3fbd34e36e24639456ce019f76aff4","observation_id":"80267212-9e6f-40c0-ac89-69b6fbade147","resolution":{"observed_at":"2026-08-06T21:50:27.662686Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:33.070453Z","title":"Berkay Celik, and Ananthram Swami","venue":null,"work_id":"19b694b7-6c1c-4881-a3ae-06f4f37f0d48","year":2017},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-10T12:16:42.797724Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":71,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:27.724515Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:caac8ba77872101ff4566321a432dfde6af54a01ac77a6b28a2bae0e322bccd5","observation_id":"8249cacc-88ab-4242-b39e-8e04afceac18","resolution":{"observed_at":"2026-08-06T21:50:33.139900Z","resolver_source":"arxiv_id_nonexistent","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:27.794299Z","title":"Coimbra, Daniel Castro, Paulo Carreira, and Nuno Santos","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-10T12:16:42.797724Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":72,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:27.794299Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:678687c38411fb2a04587a83492e96edcc84e69ec67e7603d5182ab079c45971","observation_id":"6db4fa16-a76c-4e96-b671-a09452274c0c","resolution":{"observed_at":"2026-08-06T21:50:27.794299Z","resolver_source":null,"status":"malformed_identifier"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:27.872868Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-10T12:16:42.797724Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":73,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:27.872868Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:e51e18f3702657f15ed7699021e305ffe25e62cac1a4ed28839da9029d5643ca","observation_id":"7f1535bb-5dbb-4342-b6b8-6f03c109dba0","resolution":{"observed_at":"2026-08-06T21:50:27.872868Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:27.967251Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-10T12:16:42.797724Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":74,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:27.967251Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:51c932aca80e82f6cbc0280d8859db40240c18d47600f1a7dfc743b2b3cbc3f8","observation_id":"0a342eee-667f-461c-801f-0c68f21ef9f2","resolution":{"observed_at":"2026-08-06T21:50:27.967251Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:37.486020Z","title":null,"venue":null,"work_id":"49151a17-812d-4bc1-8bf0-7d71abb3dd42","year":2023},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-10T12:16:42.797724Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":75,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:28.073922Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:58968d050edd47371a478bd39d59401a92725020e01aa9750d010e6ce404fe62","observation_id":"bce60972-b576-4a76-a11e-723a80cc697c","resolution":{"observed_at":"2026-08-06T21:50:37.603280Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:37.344398Z","title":null,"venue":null,"work_id":"bb461f8e-4a9e-4752-b054-9121335f4df7","year":2019},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-10T12:16:42.797724Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":76,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:28.153871Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:cf65bbe5b19ff54acec255b29b2e41495fd077f0f37502104caefe2ef3523aa8","observation_id":"4cdea68b-a5fc-4d7d-9479-86869516993b","resolution":{"observed_at":"2026-08-06T21:50:37.407954Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2310.10844","last_updated":"2023-10-16T21:37:24Z","snapshot_observed_at":"2026-08-07T21:21:24.962049Z","submitted_at":"2023-10-16T21:37:24Z","title":"Survey of Vulnerabilities in Large Language Models Revealed by Adversarial Attacks","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.10844","snapshot_observed_at":"2026-08-06T21:50:28.218630Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-10T12:16:42.797724Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":77,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:28.218630Z"},"links":{"cited_paper":"/paper/2310.10844","citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:dc55d4af0dc3951534c735f7ae0b471256ef10abb5b2de112df2206272126fbf","observation_id":"6834f2c5-27b5-456d-8141-d43d9c8f53e1","resolution":{"observed_at":"2026-08-06T21:50:28.218630Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:28.334929Z","title":"Do Anything Now","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-10T12:16:42.797724Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":78,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:28.334929Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:1058a8446215dc7ae2bbae6c73f33bfeaf7c2dd61476cb92fc39aa9659976730","observation_id":"a4744993-03d3-4179-a8c3-02ee53fb9d88","resolution":{"observed_at":"2026-08-06T21:50:28.334929Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:37.108369Z","title":null,"venue":null,"work_id":"fc3434ba-a148-45d6-8156-e663bd45474a","year":2024},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-10T12:16:42.797724Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":79,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:28.425222Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:054466f92f5d822e25424b2fdcc60de97e3baed7b3f2faa6ce5bdd6cecea468a","observation_id":"1f765c60-5b1d-473e-a2d5-ab7ea2ce58f3","resolution":{"observed_at":"2026-08-06T21:50:37.234868Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:28.506214Z","title":null,"venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-10T12:16:42.797724Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":80,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:28.506214Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:12f5b50fec7157c293feed9b37448d2462f37afe65f8142f4f90c13e4b20daad","observation_id":"580971cb-c8be-4861-9d28-d45010514ee5","resolution":{"observed_at":"2026-08-06T21:50:28.506214Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:28.599057Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-10T12:16:42.797724Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":81,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:28.599057Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:0f2a904d1b78b63f1372caa107f767f952ba0b1e1bd4c0f643a3ca9fa679e04f","observation_id":"ce20aad1-1f1b-40e0-859a-8aaae198965d","resolution":{"observed_at":"2026-08-06T21:50:28.599057Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:28.672916Z","title":null,"venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-10T12:16:42.797724Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":82,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:28.672916Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:f61906c77029ff90a22aed582716e26e5e67abce5875b1e1a2471efa7e783920","observation_id":"677b5824-d822-4320-8262-c513fe2ab5e8","resolution":{"observed_at":"2026-08-06T21:50:28.672916Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:28.759806Z","title":null,"venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-10T12:16:42.797724Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":83,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:28.759806Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:fd6c4df2f359d861615f8960c22bf452a7928a7afe80d5ffaab312e98f24a318","observation_id":"434a7453-98e0-4d3e-ac6a-cbed45e78b42","resolution":{"observed_at":"2026-08-06T21:50:28.759806Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1905.11742","last_updated":"2020-02-08T23:45:05Z","snapshot_observed_at":"2026-08-05T15:46:22.307756Z","submitted_at":"2019-05-28T11:16:02Z","title":"Overlearning Reveals Sensitive Attributes","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1905.11742","snapshot_observed_at":"2026-08-06T21:50:28.898466Z","title":null,"venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-10T12:16:42.797724Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":84,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:28.898466Z"},"links":{"cited_paper":"/paper/1905.11742","citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:815ba154662239147d2e6ab0f5dae35287dd882c50a62c4f595b88f8cc3edf01","observation_id":"bb4afa71-3f1b-4554-9ad8-c1648f3c91a0","resolution":{"observed_at":"2026-08-06T21:50:28.898466Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2021.31309","doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:32.531881Z","title":null,"venue":null,"work_id":"1e88a4ff-6692-4e91-8bf7-8b25e859bfed","year":2023},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-10T12:16:42.797724Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":85,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:28.979682Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:992838201788d2ea74804a009ac31d9ba979efd4c6a30239a39b8133d4a02ac2","observation_id":"317ba5e9-69b9-4a26-b678-f3e09393ea1b","resolution":{"observed_at":"2026-08-06T21:50:32.612918Z","resolver_source":"raw_fallback","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:36.881514Z","title":"Goodfellow, and Rob Fergus","venue":null,"work_id":"2dd21167-5e7d-4467-a469-fdb56a9e9a06","year":null},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-10T12:16:42.797724Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":86,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:29.056186Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:63cd94c560c8c2ed2f4a63496b467a5eb0d06afbbe671be05be9496ceae05ca4","observation_id":"583781dd-0a4b-41ee-a5a2-b2f25d6b0d6c","resolution":{"observed_at":"2026-08-06T21:50:36.989395Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:36.631007Z","title":"Reiter, and Thomas Ristenpart","venue":null,"work_id":"3e5faf13-cc16-4b29-b944-fb27f358c9e9","year":2016},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-10T12:16:42.797724Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":87,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:29.194805Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:0b110bdac44ce9d47df28f25f328bd894835f16d5a807e09efa54932f57f1be9","observation_id":"f85b0670-4163-49b8-8491-d3ea8a1eb8b1","resolution":{"observed_at":"2026-08-06T21:50:36.779151Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:36.419459Z","title":null,"venue":null,"work_id":"bf2b0958-4c6f-4be5-8a9a-5e89f73695a9","year":2021},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-10T12:16:42.797724Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":88,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:29.313154Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:7b2e60697c8e9e9dde8094b4646e1abb42b51bfa561b601ac184f63a7e4d4dcc","observation_id":"75ea9718-a563-4c9d-9026-e7989acfb059","resolution":{"observed_at":"2026-08-06T21:50:36.537093Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:29.408021Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-10T12:16:42.797724Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":89,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:29.408021Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:4c912a2afd4b2ce595afac324e3b364210ee7ece9cd723cdec811d9fc413b606","observation_id":"9d9219a3-5798-4977-9692-bfe419ebb007","resolution":{"observed_at":"2026-08-06T21:50:29.408021Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:29.488953Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-10T12:16:42.797724Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":90,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:29.488953Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:0c6a729c713197e49cf94b62e3b7dfbe58e847cc6a79c74bcac7361c8f886665","observation_id":"12880b80-1a3d-4f41-8530-985b2f6bbd95","resolution":{"observed_at":"2026-08-06T21:50:29.488953Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.18653/v1/d19-1","metadata_source":"openalex","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T05:30:23.456663Z","title":null,"venue":null,"work_id":"26d87c85-57b4-4d94-bed4-5f6f9213a7ed","year":2019},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-10T12:16:42.797724Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":91,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:29.596213Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:c721e2012b885ede715c53b59658bae1e3a7461c4818c6094b53649eb861ce4a","observation_id":"82ac439d-25fa-4515-af69-78aac1428211","resolution":{"observed_at":"2026-08-06T21:50:31.183628Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:29.685623Z","title":null,"venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-10T12:16:42.797724Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":92,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:29.685623Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:86a91d79079afe38b1042871b73aea9e388aa57a33b02634df174927a672c880","observation_id":"f6267c2b-7e7a-4958-a2d4-289ff395bb3c","resolution":{"observed_at":"2026-08-06T21:50:29.685623Z","resolver_source":null,"status":"malformed_identifier"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:36.113916Z","title":null,"venue":null,"work_id":"2d91548b-35fd-4cc1-b7ff-f0d637f2e289","year":2023},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-10T12:16:42.797724Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":93,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:29.743803Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:2b248f922c6d8cbb64daba012b7d2c3dcfd98f205c43d3d02808810cb40ded18","observation_id":"7349fd77-9483-44c8-8671-5443cc971cff","resolution":{"observed_at":"2026-08-06T21:50:36.268829Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:35.846535Z","title":null,"venue":null,"work_id":"4efb9592-d1ff-484d-be6a-54a6112227cc","year":2024},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-10T12:16:42.797724Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":94,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:29.809419Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:99c9a12a0a68e6bab8a6a7a133677d0f18708a49a14d6dda53113ed7ef723429","observation_id":"e3a5929f-487c-4a3b-9244-8a740282b91e","resolution":{"observed_at":"2026-08-06T21:50:35.968252Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:29.879926Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-10T12:16:42.797724Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":95,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:29.879926Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:1dea5ca63ac69d9a9ff40851d2f1842feb47251e5c9f57abbc532cce1c3d6f3a","observation_id":"2c57ae27-f76b-4ad0-9b42-481583f0b2a2","resolution":{"observed_at":"2026-08-06T21:50:29.879926Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:29.965749Z","title":null,"venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-10T12:16:42.797724Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":96,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:29.965749Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:132e1d045a027d609977aae70c50d740c51723ad4e3174d48fb13d66b43d709f","observation_id":"d1af0fb0-8d12-4e33-9d03-078c434d20d1","resolution":{"observed_at":"2026-08-06T21:50:29.965749Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:30.093777Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-10T12:16:42.797724Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":97,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:30.093777Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:f9c5f047f14dcfbce3b0d4ded07cec282ce199aff43e880d5d577087fc594f6e","observation_id":"5c0e46c6-9d82-43ce-914f-7a40722f7170","resolution":{"observed_at":"2026-08-06T21:50:30.093777Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:30.170717Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-10T12:16:42.797724Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":98,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:30.170717Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:55f6c4c37b234c2e4b4c3c7003afafae1ec564b45112ac5707973c74fbd33e54","observation_id":"1fc9153d-0760-46d6-9af4-867076972e4d","resolution":{"observed_at":"2026-08-06T21:50:30.170717Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:30.289164Z","title":null,"venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-10T12:16:42.797724Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":99,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:30.289164Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:8b0ccab19c5c4c6bf52ff9bf001dba5a5dd2db8ae00900567f4360dc8f47a245","observation_id":"6cd673d6-e606-4aa0-9e2e-3a0d24a0f6c5","resolution":{"observed_at":"2026-08-06T21:50:30.289164Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:30.424239Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-10T12:16:42.797724Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":100,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:30.424239Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:13a57ae8303815c0443394ad641a9f68f3dc3df8d7c78ed5df255d8ae64aac79","observation_id":"dee12ea4-8595-48f6-a993-843e0f0b5b21","resolution":{"observed_at":"2026-08-06T21:50:30.424239Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2209.10505","last_updated":"2022-09-21T17:05:12Z","snapshot_observed_at":"2026-07-06T13:54:49.290065Z","submitted_at":"2022-09-21T17:05:12Z","title":"Text Revealer: Private Text Reconstruction via Model Inversion Attacks against Transformers","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2209.10505","snapshot_observed_at":"2026-08-06T21:50:30.552161Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-10T12:16:42.797724Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":101,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:30.552161Z"},"links":{"cited_paper":"/paper/2209.10505","citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:21415e747de6f6a5865709e81c1dce5b452cd44dd8c2cf913e11c71a6e89982f","observation_id":"5224b3fa-d0ae-4942-ac78-7cb0d497e35b","resolution":{"observed_at":"2026-08-06T21:50:30.552161Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2307.06865","last_updated":"2024-08-07T22:05:01Z","snapshot_observed_at":"2026-08-07T22:01:02.608714Z","submitted_at":"2023-07-13T16:15:08Z","title":"Effective Prompt Extraction from Language Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.06865","snapshot_observed_at":"2026-08-06T21:50:30.639123Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-10T12:16:42.797724Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":102,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:30.639123Z"},"links":{"cited_paper":"/paper/2307.06865","citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:6357a5f778daa32840d2c05955ef3f82b6095154388bb68018c452d17f12f8aa","observation_id":"0c396fbc-a2e3-4865-937a-7b29a1f4bee4","resolution":{"observed_at":"2026-08-06T21:50:30.639123Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-10T12:16:42.797724Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts"},"reference_resolution":{"displayed":100,"state_counts":{"malformed_identifier":3,"metadata_mismatch":2,"parse_uncertain":0,"unresolved":82,"verified_exact":11,"verified_fuzzy":2},"total_outbound_references":107},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"thesis":"As of 10 August 2026, this Paper Citation Record lists 100 of 107 outbound references and 0 inbound Pith citation observations for arXiv:2506.23296."}