{"as_of":"2026-08-10T11:22:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:683790affe3c25445a31ad6452c8e5ff66837f9e2ff63bcb125f56545e6bd4a1","coverage":[{"denominator":46,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":46,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-06T14:05:02.319374Z","state":"measured"},{"denominator":46,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":46,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-10T06:31:04.303077+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2507.21177/citation-record","integrity":"/paper/2507.21177/integrity","json":"/paper/2507.21177/citation-record.json","paper":"/paper/2507.21177"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T14:05:02.957878Z","title":null,"venue":null,"work_id":"8fbc15cf-98d5-4364-925e-50c7903a696e","year":2020},"citing_paper":{"arxiv_id":"2507.21177","last_updated":"2025-07-26T07:00:32Z","snapshot_observed_at":"2026-08-09T13:16:39.804482Z","submitted_at":"2025-07-26T07:00:32Z","title":"FedBAP: Backdoor Defense via Benign Adversarial Perturbation in Federated Learning","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-06T14:04:58.590926Z"},"links":{"citing_paper":"/paper/2507.21177"},"observation_digest":"sha256:fb919c1ad87a1a95a8d1e686538a30d8529f60273501abc5c0e12635c04bb39d","observation_id":"d861fe75-b78b-4d9e-b27c-844587e14917","resolution":{"observed_at":"2026-08-06T14:05:02.960708Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T14:04:58.681316Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2507.21177","last_updated":"2025-07-26T07:00:32Z","snapshot_observed_at":"2026-08-09T13:16:39.804482Z","submitted_at":"2025-07-26T07:00:32Z","title":"FedBAP: Backdoor Defense via Benign Adversarial Perturbation in Federated Learning","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-06T14:04:58.681316Z"},"links":{"citing_paper":"/paper/2507.21177"},"observation_digest":"sha256:9a5a106a749d383da4040298a68b88a626448dc69b8bebd87279fedff6fe174b","observation_id":"9d335b95-69b4-4280-b9cc-31b79f8d0e94","resolution":{"observed_at":"2026-08-06T14:04:58.681316Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2012.13995","last_updated":"2022-04-12T01:56:47Z","snapshot_observed_at":"2026-07-06T10:28:06.533127Z","submitted_at":"2020-12-27T18:43:39Z","title":"FLTrust: Byzantine-robust Federated Learning via Trust Bootstrapping","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2012.13995","snapshot_observed_at":"2026-08-06T14:04:58.839894Z","title":null,"venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2507.21177","last_updated":"2025-07-26T07:00:32Z","snapshot_observed_at":"2026-08-09T13:16:39.804482Z","submitted_at":"2025-07-26T07:00:32Z","title":"FedBAP: Backdoor Defense via Benign Adversarial Perturbation in Federated Learning","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-06T14:04:58.839894Z"},"links":{"cited_paper":"/paper/2012.13995","citing_paper":"/paper/2507.21177"},"observation_digest":"sha256:15effc32271f47bae054039bb89859f4a0d43295a79ce6db724366f4513f9fd1","observation_id":"35e62619-b54d-4154-a362-5de5c403fa40","resolution":{"observed_at":"2026-08-06T14:04:58.839894Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T14:05:02.934008Z","title":null,"venue":null,"work_id":"e020e6d2-394e-4bc0-89ec-dc5044d92929","year":2021},"citing_paper":{"arxiv_id":"2507.21177","last_updated":"2025-07-26T07:00:32Z","snapshot_observed_at":"2026-08-09T13:16:39.804482Z","submitted_at":"2025-07-26T07:00:32Z","title":"FedBAP: Backdoor Defense via Benign Adversarial Perturbation in Federated Learning","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-06T14:04:58.887029Z"},"links":{"citing_paper":"/paper/2507.21177"},"observation_digest":"sha256:d54b264eaf489542c3ceb5ce83ca0c2a7aa4ba2387b82bf1e5f3b0df5be5d481","observation_id":"dbadce7d-e5c6-4f85-8b70-2c08494c74c8","resolution":{"observed_at":"2026-08-06T14:05:02.936611Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T14:05:02.925222Z","title":null,"venue":null,"work_id":"2f884171-4777-451c-90d8-d6a6689a1071","year":2020},"citing_paper":{"arxiv_id":"2507.21177","last_updated":"2025-07-26T07:00:32Z","snapshot_observed_at":"2026-08-09T13:16:39.804482Z","submitted_at":"2025-07-26T07:00:32Z","title":"FedBAP: Backdoor Defense via Benign Adversarial Perturbation in Federated Learning","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-06T14:04:58.983745Z"},"links":{"citing_paper":"/paper/2507.21177"},"observation_digest":"sha256:a2c89fbf663d3d1fbdffe6c8fd1dbe5d9bda15aaaa3e63a2acaa1858061671eb","observation_id":"bc6efbd7-0467-425b-ab7d-0a8b946ca221","resolution":{"observed_at":"2026-08-06T14:05:02.928015Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T14:05:02.916058Z","title":null,"venue":null,"work_id":"6de161c4-aa39-4bc4-bdb5-48ffe7b485df","year":2023},"citing_paper":{"arxiv_id":"2507.21177","last_updated":"2025-07-26T07:00:32Z","snapshot_observed_at":"2026-08-09T13:16:39.804482Z","submitted_at":"2025-07-26T07:00:32Z","title":"FedBAP: Backdoor Defense via Benign Adversarial Perturbation in Federated Learning","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-06T14:04:59.050342Z"},"links":{"citing_paper":"/paper/2507.21177"},"observation_digest":"sha256:3e2ef57b86ef89bc25b87724f1d89a032c7f30cc20e55e9781f89372b96d4ddb","observation_id":"4915d65c-65dc-4258-b35b-58237bccccde","resolution":{"observed_at":"2026-08-06T14:05:02.918954Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T14:05:02.907768Z","title":null,"venue":null,"work_id":"87689d60-0e8f-4a94-968b-b906c95afe45","year":2023},"citing_paper":{"arxiv_id":"2507.21177","last_updated":"2025-07-26T07:00:32Z","snapshot_observed_at":"2026-08-09T13:16:39.804482Z","submitted_at":"2025-07-26T07:00:32Z","title":"FedBAP: Backdoor Defense via Benign Adversarial Perturbation in Federated Learning","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-06T14:04:59.156910Z"},"links":{"citing_paper":"/paper/2507.21177"},"observation_digest":"sha256:96a07ed3493df3b97c5f2f1612278d429707f6e00b72473887c6db7c11a3a046","observation_id":"3c93190c-482d-4d17-bdf2-0f5b3675a926","resolution":{"observed_at":"2026-08-06T14:05:02.910339Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-07-06T05:56:16.413472Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1708.06733","snapshot_observed_at":"2026-08-06T14:04:59.205807Z","title":null,"venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2507.21177","last_updated":"2025-07-26T07:00:32Z","snapshot_observed_at":"2026-08-09T13:16:39.804482Z","submitted_at":"2025-07-26T07:00:32Z","title":"FedBAP: Backdoor Defense via Benign Adversarial Perturbation in Federated Learning","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-06T14:04:59.205807Z"},"links":{"cited_paper":"/paper/1708.06733","citing_paper":"/paper/2507.21177"},"observation_digest":"sha256:d277a1adac231dc67e5397e2ca89753bcd6e304eb30b9e2d9db5556d37ed1c2d","observation_id":"a1e29961-a195-4f22-88fc-d8d6a9381f52","resolution":{"observed_at":"2026-08-06T14:04:59.205807Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1811.03604","last_updated":"2019-02-28T21:07:51Z","snapshot_observed_at":"2026-08-10T06:38:25.165407Z","submitted_at":"2018-11-08T18:37:03Z","title":"Federated Learning for Mobile Keyboard Prediction","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1811.03604","snapshot_observed_at":"2026-08-06T14:04:59.270501Z","title":null,"venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2507.21177","last_updated":"2025-07-26T07:00:32Z","snapshot_observed_at":"2026-08-09T13:16:39.804482Z","submitted_at":"2025-07-26T07:00:32Z","title":"FedBAP: Backdoor Defense via Benign Adversarial Perturbation in Federated Learning","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-06T14:04:59.270501Z"},"links":{"cited_paper":"/paper/1811.03604","citing_paper":"/paper/2507.21177"},"observation_digest":"sha256:6dc4fcb3e1af343c0410714470ca15cefa7ded2f1dbff5e9412cd07418613f86","observation_id":"eb5fa2ff-486a-4e65-b665-51cfc12e7706","resolution":{"observed_at":"2026-08-06T14:04:59.270501Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T14:05:02.898677Z","title":null,"venue":null,"work_id":"845ad18d-4d8f-4d13-b5e6-a281e2aef628","year":2023},"citing_paper":{"arxiv_id":"2507.21177","last_updated":"2025-07-26T07:00:32Z","snapshot_observed_at":"2026-08-09T13:16:39.804482Z","submitted_at":"2025-07-26T07:00:32Z","title":"FedBAP: Backdoor Defense via Benign Adversarial Perturbation in Federated Learning","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-06T14:04:59.360662Z"},"links":{"citing_paper":"/paper/2507.21177"},"observation_digest":"sha256:59dca29d82d1742e8b659007321d81368161b5309c4c77b030ad0c240ae820ad","observation_id":"c9fc9d6e-b0cf-4e36-88da-6ae678e23534","resolution":{"observed_at":"2026-08-06T14:05:02.901684Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T14:05:02.890006Z","title":null,"venue":null,"work_id":"2510c8b0-c3c2-4e9b-a70d-ee648751e946","year":2024},"citing_paper":{"arxiv_id":"2507.21177","last_updated":"2025-07-26T07:00:32Z","snapshot_observed_at":"2026-08-09T13:16:39.804482Z","submitted_at":"2025-07-26T07:00:32Z","title":"FedBAP: Backdoor Defense via Benign Adversarial Perturbation in Federated Learning","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-06T14:04:59.444399Z"},"links":{"citing_paper":"/paper/2507.21177"},"observation_digest":"sha256:1df6dec4b3cb4c9d5a061dc54e2271009b2bad5db1ed1b5e4e731ae3b0f7e6b9","observation_id":"7ffdd8a5-7601-4b33-81f9-931652b2eee6","resolution":{"observed_at":"2026-08-06T14:05:02.892642Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T14:05:02.881454Z","title":null,"venue":null,"work_id":"5fcbabfa-e94b-42d0-8903-bceddf29b1b9","year":2023},"citing_paper":{"arxiv_id":"2507.21177","last_updated":"2025-07-26T07:00:32Z","snapshot_observed_at":"2026-08-09T13:16:39.804482Z","submitted_at":"2025-07-26T07:00:32Z","title":"FedBAP: Backdoor Defense via Benign Adversarial Perturbation in Federated Learning","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-06T14:04:59.527124Z"},"links":{"citing_paper":"/paper/2507.21177"},"observation_digest":"sha256:5b9e52ad26fa2710c30aad4982dabc274d8c4731c96a89fe00441e5064b6db5c","observation_id":"d4f3c940-b397-4d9b-adc0-798977df352a","resolution":{"observed_at":"2026-08-06T14:05:02.884404Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T14:05:02.872796Z","title":null,"venue":null,"work_id":"62434a9d-77b1-4fc6-a494-13ad38adb990","year":2024},"citing_paper":{"arxiv_id":"2507.21177","last_updated":"2025-07-26T07:00:32Z","snapshot_observed_at":"2026-08-09T13:16:39.804482Z","submitted_at":"2025-07-26T07:00:32Z","title":"FedBAP: Backdoor Defense via Benign Adversarial Perturbation in Federated Learning","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-06T14:04:59.590676Z"},"links":{"citing_paper":"/paper/2507.21177"},"observation_digest":"sha256:7f47ba214db95960432909ecebb6ca491032dfda21f83f7dc87f720a42782f58","observation_id":"d6c1fd33-2d9d-495c-8dbb-6c2b544b97e0","resolution":{"observed_at":"2026-08-06T14:05:02.875732Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T14:05:02.863356Z","title":null,"venue":null,"work_id":"65a1a45c-d9d2-4d03-ae18-55e256ef3363","year":2023},"citing_paper":{"arxiv_id":"2507.21177","last_updated":"2025-07-26T07:00:32Z","snapshot_observed_at":"2026-08-09T13:16:39.804482Z","submitted_at":"2025-07-26T07:00:32Z","title":"FedBAP: Backdoor Defense via Benign Adversarial Perturbation in Federated Learning","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-06T14:04:59.689737Z"},"links":{"citing_paper":"/paper/2507.21177"},"observation_digest":"sha256:bca30bf50c3bda7d93de511c44c306c17eb306547ac6d8c7538fdfc8b3bd233b","observation_id":"c06752d3-7087-49c7-890a-804ebf9898cd","resolution":{"observed_at":"2026-08-06T14:05:02.866466Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2405.03299","last_updated":"2024-05-06T09:21:15Z","snapshot_observed_at":"2026-07-06T18:10:16.760984Z","submitted_at":"2024-05-06T09:21:15Z","title":"DarkFed: A Data-Free Backdoor Attack in Federated Learning","version":1},"cited_work":{"arxiv_id":"2405.03299","doi":null,"metadata_source":"pith","pith_arxiv_id":"2405.03299","snapshot_observed_at":"2026-08-06T14:05:02.579434Z","title":"DarkFed: A Data-Free Backdoor Attack in Federated Learning","venue":"cs.CR","work_id":"9e2b1b00-ec35-4fb9-8ec0-d758c36fe5e3","year":2024},"citing_paper":{"arxiv_id":"2507.21177","last_updated":"2025-07-26T07:00:32Z","snapshot_observed_at":"2026-08-09T13:16:39.804482Z","submitted_at":"2025-07-26T07:00:32Z","title":"FedBAP: Backdoor Defense via Benign Adversarial Perturbation in Federated Learning","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-06T14:04:59.762596Z"},"links":{"cited_paper":"/paper/2405.03299","citing_paper":"/paper/2507.21177"},"observation_digest":"sha256:647492f71358084d18f80df6526c11edd5a49fbc95acaffbb312e1bc7a6a84da","observation_id":"cf9bd433-230e-4549-ba74-dd007d14d748","resolution":{"observed_at":"2026-08-06T14:05:02.583200Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T14:05:02.854525Z","title":null,"venue":null,"work_id":"3618c590-14fc-45f5-a7f2-91d6e781da3d","year":2024},"citing_paper":{"arxiv_id":"2507.21177","last_updated":"2025-07-26T07:00:32Z","snapshot_observed_at":"2026-08-09T13:16:39.804482Z","submitted_at":"2025-07-26T07:00:32Z","title":"FedBAP: Backdoor Defense via Benign Adversarial Perturbation in Federated Learning","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-06T14:04:59.796285Z"},"links":{"citing_paper":"/paper/2507.21177"},"observation_digest":"sha256:92bada439c7d24ab0c21b2fb6cceb9504a5d3be503df2c20685fe2bfe693b879","observation_id":"05617f8a-6d84-4aec-a84f-dd6572c20899","resolution":{"observed_at":"2026-08-06T14:05:02.857294Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T14:05:02.845278Z","title":null,"venue":null,"work_id":"5a5574a4-e306-403f-a7d4-295246cdae6a","year":2024},"citing_paper":{"arxiv_id":"2507.21177","last_updated":"2025-07-26T07:00:32Z","snapshot_observed_at":"2026-08-09T13:16:39.804482Z","submitted_at":"2025-07-26T07:00:32Z","title":"FedBAP: Backdoor Defense via Benign Adversarial Perturbation in Federated Learning","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-06T14:04:59.870038Z"},"links":{"citing_paper":"/paper/2507.21177"},"observation_digest":"sha256:bae97f90fcd23f7c98a5632fae499625652ebeb6d7822c803203bf55061f060c","observation_id":"75eec137-66a3-4b2d-aab8-a98fe75d2ba7","resolution":{"observed_at":"2026-08-06T14:05:02.848394Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T14:05:02.836708Z","title":null,"venue":null,"work_id":"582779ad-ecfa-43e2-97f2-6b802c616d00","year":2023},"citing_paper":{"arxiv_id":"2507.21177","last_updated":"2025-07-26T07:00:32Z","snapshot_observed_at":"2026-08-09T13:16:39.804482Z","submitted_at":"2025-07-26T07:00:32Z","title":"FedBAP: Backdoor Defense via Benign Adversarial Perturbation in Federated Learning","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-06T14:04:59.916841Z"},"links":{"citing_paper":"/paper/2507.21177"},"observation_digest":"sha256:18dfaeb92da983e73e245a1a151a88805a532079e5ffba6ba43c6e994caa883b","observation_id":"0f12b34c-b253-4daa-a0a7-62c7ad285716","resolution":{"observed_at":"2026-08-06T14:05:02.839568Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T14:05:02.827761Z","title":null,"venue":null,"work_id":"d27b272d-9139-4ea3-9e21-82bfb64b1bea","year":2024},"citing_paper":{"arxiv_id":"2507.21177","last_updated":"2025-07-26T07:00:32Z","snapshot_observed_at":"2026-08-09T13:16:39.804482Z","submitted_at":"2025-07-26T07:00:32Z","title":"FedBAP: Backdoor Defense via Benign Adversarial Perturbation in Federated Learning","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-06T14:05:00.019360Z"},"links":{"citing_paper":"/paper/2507.21177"},"observation_digest":"sha256:c661a11d5b072d55e1af3b7bb118cd889623d0d9e6420353572954db382fa03a","observation_id":"acee67fc-b88d-4bc4-9304-ada4fd058235","resolution":{"observed_at":"2026-08-06T14:05:02.830688Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T14:05:02.819248Z","title":null,"venue":null,"work_id":"68c6fa6d-b407-4c50-90d5-b47405648ef8","year":2017},"citing_paper":{"arxiv_id":"2507.21177","last_updated":"2025-07-26T07:00:32Z","snapshot_observed_at":"2026-08-09T13:16:39.804482Z","submitted_at":"2025-07-26T07:00:32Z","title":"FedBAP: Backdoor Defense via Benign Adversarial Perturbation in Federated Learning","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-06T14:05:00.107183Z"},"links":{"citing_paper":"/paper/2507.21177"},"observation_digest":"sha256:827a25a25c1fc1c7bb7d30a62f1e91888866ca528031e22aa296163283b8ecf9","observation_id":"7339536b-df8a-429c-9ebb-f986e7d53d09","resolution":{"observed_at":"2026-08-06T14:05:02.822007Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T14:05:02.810438Z","title":null,"venue":null,"work_id":"7e50559a-235d-4b13-9935-0deaca4ece81","year":2019},"citing_paper":{"arxiv_id":"2507.21177","last_updated":"2025-07-26T07:00:32Z","snapshot_observed_at":"2026-08-09T13:16:39.804482Z","submitted_at":"2025-07-26T07:00:32Z","title":"FedBAP: Backdoor Defense via Benign Adversarial Perturbation in Federated Learning","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-06T14:05:00.182436Z"},"links":{"citing_paper":"/paper/2507.21177"},"observation_digest":"sha256:d8b2f64d2ff36d5ffe39ba2b5eb556184c15706d7e751ff77fec363f83ae9612","observation_id":"4573907c-68b0-44b7-99b6-90fc3f2a559c","resolution":{"observed_at":"2026-08-06T14:05:02.813355Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T14:05:02.800894Z","title":null,"venue":null,"work_id":"cc531a1d-4bcc-40fd-936d-1bdabf51081d","year":2023},"citing_paper":{"arxiv_id":"2507.21177","last_updated":"2025-07-26T07:00:32Z","snapshot_observed_at":"2026-08-09T13:16:39.804482Z","submitted_at":"2025-07-26T07:00:32Z","title":"FedBAP: Backdoor Defense via Benign Adversarial Perturbation in Federated Learning","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-06T14:05:00.249101Z"},"links":{"citing_paper":"/paper/2507.21177"},"observation_digest":"sha256:519c0bb48c8c21605403322ad04e12a735a797192035accc86ccae404dba1982","observation_id":"4f45208b-c0a8-448a-9c07-9a923d191f6a","resolution":{"observed_at":"2026-08-06T14:05:02.804103Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T14:05:02.791227Z","title":null,"venue":null,"work_id":"7645527a-ec6e-45d1-a896-1a9b1d75e0fe","year":2022},"citing_paper":{"arxiv_id":"2507.21177","last_updated":"2025-07-26T07:00:32Z","snapshot_observed_at":"2026-08-09T13:16:39.804482Z","submitted_at":"2025-07-26T07:00:32Z","title":"FedBAP: Backdoor Defense via Benign Adversarial Perturbation in Federated Learning","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-06T14:05:00.318193Z"},"links":{"citing_paper":"/paper/2507.21177"},"observation_digest":"sha256:d712f57f9c7b68ff0f5662576eae67c093f4274b95b60329e0e4c4b9628d3cf8","observation_id":"9a5b8586-62b1-443e-b025-977bbb59e26e","resolution":{"observed_at":"2026-08-06T14:05:02.794187Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T14:05:02.781608Z","title":null,"venue":null,"work_id":"2ba8606f-cd9e-4dc8-b942-9ea8e0c34816","year":2021},"citing_paper":{"arxiv_id":"2507.21177","last_updated":"2025-07-26T07:00:32Z","snapshot_observed_at":"2026-08-09T13:16:39.804482Z","submitted_at":"2025-07-26T07:00:32Z","title":"FedBAP: Backdoor Defense via Benign Adversarial Perturbation in Federated Learning","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-06T14:05:00.331553Z"},"links":{"citing_paper":"/paper/2507.21177"},"observation_digest":"sha256:9d05b7b4210b0863580dd0617ff9a21364459b2b3fbe7ee536a678c913363d67","observation_id":"367c215e-715d-4d78-92cc-7d5733c038bd","resolution":{"observed_at":"2026-08-06T14:05:02.784598Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T14:05:02.771387Z","title":null,"venue":null,"work_id":"d2f3fe1a-519a-4ebb-93d3-7c7e74308412","year":2024},"citing_paper":{"arxiv_id":"2507.21177","last_updated":"2025-07-26T07:00:32Z","snapshot_observed_at":"2026-08-09T13:16:39.804482Z","submitted_at":"2025-07-26T07:00:32Z","title":"FedBAP: Backdoor Defense via Benign Adversarial Perturbation in Federated Learning","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-06T14:05:00.428596Z"},"links":{"citing_paper":"/paper/2507.21177"},"observation_digest":"sha256:bbb12ebcb4fe13dcaeb1e01c1e25c3e50bcbf9663748f5177c6687cf8162a75a","observation_id":"9e69ee8d-b0c7-4ae2-848b-8aa2df5db55a","resolution":{"observed_at":"2026-08-06T14:05:02.774756Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2210.07714","last_updated":"2023-08-22T10:26:00Z","snapshot_observed_at":"2026-08-06T12:40:47.935851Z","submitted_at":"2022-10-14T11:27:49Z","title":"CrowdGuard: Federated Backdoor Detection in Federated Learning","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2210.07714","snapshot_observed_at":"2026-08-06T14:05:00.552631Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2507.21177","last_updated":"2025-07-26T07:00:32Z","snapshot_observed_at":"2026-08-09T13:16:39.804482Z","submitted_at":"2025-07-26T07:00:32Z","title":"FedBAP: Backdoor Defense via Benign Adversarial Perturbation in Federated Learning","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-06T14:05:00.552631Z"},"links":{"cited_paper":"/paper/2210.07714","citing_paper":"/paper/2507.21177"},"observation_digest":"sha256:1e9ab22aa450769d49a04a22b350aeb330ee0dbb50a55ab031eb6bfb2dcf4712","observation_id":"32614150-ce03-4027-96ed-28e9b185c241","resolution":{"observed_at":"2026-08-06T14:05:00.552631Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T14:05:02.761365Z","title":null,"venue":null,"work_id":"735af238-b3aa-4917-ab3d-6872f6ebf6f2","year":2018},"citing_paper":{"arxiv_id":"2507.21177","last_updated":"2025-07-26T07:00:32Z","snapshot_observed_at":"2026-08-09T13:16:39.804482Z","submitted_at":"2025-07-26T07:00:32Z","title":"FedBAP: Backdoor Defense via Benign Adversarial Perturbation in Federated Learning","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-06T14:05:00.773968Z"},"links":{"citing_paper":"/paper/2507.21177"},"observation_digest":"sha256:2d74c1f8e7a53e4650b53ae72a521b351dcee12c3434b8cfc821f4de5ba4fa1a","observation_id":"8cb0b337-7e99-45fc-a3ca-c5116bf9a152","resolution":{"observed_at":"2026-08-06T14:05:02.764514Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T14:05:02.752018Z","title":null,"venue":null,"work_id":"4f4c8c74-f28d-41ee-aa18-c3d4ac8018fb","year":2024},"citing_paper":{"arxiv_id":"2507.21177","last_updated":"2025-07-26T07:00:32Z","snapshot_observed_at":"2026-08-09T13:16:39.804482Z","submitted_at":"2025-07-26T07:00:32Z","title":"FedBAP: Backdoor Defense via Benign Adversarial Perturbation in Federated Learning","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-06T14:05:00.909160Z"},"links":{"citing_paper":"/paper/2507.21177"},"observation_digest":"sha256:f8e8afb3418db1945d7e17a75c12738b60527bc821845e1bcbdebd70038804d3","observation_id":"09a9309f-4c17-4078-9d50-40006ebdc14a","resolution":{"observed_at":"2026-08-06T14:05:02.754949Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T14:05:01.033499Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2507.21177","last_updated":"2025-07-26T07:00:32Z","snapshot_observed_at":"2026-08-09T13:16:39.804482Z","submitted_at":"2025-07-26T07:00:32Z","title":"FedBAP: Backdoor Defense via Benign Adversarial Perturbation in Federated Learning","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-06T14:05:01.033499Z"},"links":{"citing_paper":"/paper/2507.21177"},"observation_digest":"sha256:be59720dd957958ee2b3111e171ab53ad2d09040f4d63706effab69858d9af9c","observation_id":"0ea25543-a724-4c5d-990a-09b0ba8eb344","resolution":{"observed_at":"2026-08-06T14:05:01.033499Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T14:05:02.736096Z","title":null,"venue":null,"work_id":"84db889d-d7fc-4f71-8dab-90713dc5e7bb","year":2020},"citing_paper":{"arxiv_id":"2507.21177","last_updated":"2025-07-26T07:00:32Z","snapshot_observed_at":"2026-08-09T13:16:39.804482Z","submitted_at":"2025-07-26T07:00:32Z","title":"FedBAP: Backdoor Defense via Benign Adversarial Perturbation in Federated Learning","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-06T14:05:01.303678Z"},"links":{"citing_paper":"/paper/2507.21177"},"observation_digest":"sha256:00e22cd54a41808e7480fac76f702da7acafbb472e2d5df0b75e6654b68f8ffd","observation_id":"109b2135-adbf-4d2e-8b9e-9f38f70882eb","resolution":{"observed_at":"2026-08-06T14:05:02.739985Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T14:05:02.726677Z","title":null,"venue":null,"work_id":"4bdf123d-8a58-4e7e-8c07-8f126fc79464","year":2023},"citing_paper":{"arxiv_id":"2507.21177","last_updated":"2025-07-26T07:00:32Z","snapshot_observed_at":"2026-08-09T13:16:39.804482Z","submitted_at":"2025-07-26T07:00:32Z","title":"FedBAP: Backdoor Defense via Benign Adversarial Perturbation in Federated Learning","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-06T14:05:01.430561Z"},"links":{"citing_paper":"/paper/2507.21177"},"observation_digest":"sha256:28484b68e08fb987b4c8c321948d9c3567927ab5087ec3661c7c82f1158e22e9","observation_id":"f780f52d-b3c4-4130-bf8e-18db18560bb2","resolution":{"observed_at":"2026-08-06T14:05:02.729767Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T14:05:02.717267Z","title":null,"venue":null,"work_id":"3bd37d86-f4e0-4560-9975-abae07a03b26","year":2019},"citing_paper":{"arxiv_id":"2507.21177","last_updated":"2025-07-26T07:00:32Z","snapshot_observed_at":"2026-08-09T13:16:39.804482Z","submitted_at":"2025-07-26T07:00:32Z","title":"FedBAP: Backdoor Defense via Benign Adversarial Perturbation in Federated Learning","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-06T14:05:01.494760Z"},"links":{"citing_paper":"/paper/2507.21177"},"observation_digest":"sha256:76d91f7fe743aca5dcc13aeb2c6810473d0b100033505b35dd27caec14fa396f","observation_id":"89906b40-5036-432b-8ec3-f23a22988230","resolution":{"observed_at":"2026-08-06T14:05:02.720465Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T14:05:01.575432Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2507.21177","last_updated":"2025-07-26T07:00:32Z","snapshot_observed_at":"2026-08-09T13:16:39.804482Z","submitted_at":"2025-07-26T07:00:32Z","title":"FedBAP: Backdoor Defense via Benign Adversarial Perturbation in Federated Learning","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-06T14:05:01.575432Z"},"links":{"citing_paper":"/paper/2507.21177"},"observation_digest":"sha256:64c1df059162495eee19426654c696da2ffd921b5a627ea41bfcfc9dbd43435f","observation_id":"1b9ea602-8063-4f7b-8091-1adc1c7f488d","resolution":{"observed_at":"2026-08-06T14:05:01.575432Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T14:05:02.691994Z","title":null,"venue":null,"work_id":"5358df6a-b34c-40c4-99b4-2e6167e28305","year":2019},"citing_paper":{"arxiv_id":"2507.21177","last_updated":"2025-07-26T07:00:32Z","snapshot_observed_at":"2026-08-09T13:16:39.804482Z","submitted_at":"2025-07-26T07:00:32Z","title":"FedBAP: Backdoor Defense via Benign Adversarial Perturbation in Federated Learning","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-06T14:05:01.837394Z"},"links":{"citing_paper":"/paper/2507.21177"},"observation_digest":"sha256:ad27b7d852646141c35aa1ff6be7a3fc03b60eba28a5d4fae911550055c2cfbf","observation_id":"78526327-dd6c-4684-bd64-d718190a3f1b","resolution":{"observed_at":"2026-08-06T14:05:02.695040Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T14:05:02.682542Z","title":null,"venue":null,"work_id":"bd954e54-2c2b-47bd-8542-78d585190684","year":2024},"citing_paper":{"arxiv_id":"2507.21177","last_updated":"2025-07-26T07:00:32Z","snapshot_observed_at":"2026-08-09T13:16:39.804482Z","submitted_at":"2025-07-26T07:00:32Z","title":"FedBAP: Backdoor Defense via Benign Adversarial Perturbation in Federated Learning","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-06T14:05:01.971298Z"},"links":{"citing_paper":"/paper/2507.21177"},"observation_digest":"sha256:96cc8472528a9abbafdfb3d0ebe799b7f3c391b163a4eb22ebab73584e71940e","observation_id":"fc223c18-4c06-4e10-8a98-28044f3747f5","resolution":{"observed_at":"2026-08-06T14:05:02.685548Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T14:05:02.671220Z","title":null,"venue":null,"work_id":"eeaf63e9-5aed-4108-8089-c4c29d32a64e","year":2023},"citing_paper":{"arxiv_id":"2507.21177","last_updated":"2025-07-26T07:00:32Z","snapshot_observed_at":"2026-08-09T13:16:39.804482Z","submitted_at":"2025-07-26T07:00:32Z","title":"FedBAP: Backdoor Defense via Benign Adversarial Perturbation in Federated Learning","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-06T14:05:02.115326Z"},"links":{"citing_paper":"/paper/2507.21177"},"observation_digest":"sha256:545e749749885a13c2faf6ceeae3cb73f5cc7a325a076583ebbafba4e104a99c","observation_id":"d7ad780a-2a99-45ea-b6a6-5b594bcae2ad","resolution":{"observed_at":"2026-08-06T14:05:02.675150Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2210.12873","last_updated":"2023-02-27T19:30:01Z","snapshot_observed_at":"2026-07-06T14:09:20.919933Z","submitted_at":"2022-10-23T22:24:03Z","title":"FLIP: A Provable Defense Framework for Backdoor Mitigation in Federated Learning","version":2},"cited_work":{"arxiv_id":"2210.12873","doi":null,"metadata_source":"pith","pith_arxiv_id":"2210.12873","snapshot_observed_at":"2026-08-06T14:05:02.363732Z","title":"FLIP: A Provable Defense Framework for Backdoor Mitigation in Federated Learning","venue":"cs.CR","work_id":"d6a2e457-554b-4c78-bf61-e2a202c0676c","year":2022},"citing_paper":{"arxiv_id":"2507.21177","last_updated":"2025-07-26T07:00:32Z","snapshot_observed_at":"2026-08-09T13:16:39.804482Z","submitted_at":"2025-07-26T07:00:32Z","title":"FedBAP: Backdoor Defense via Benign Adversarial Perturbation in Federated Learning","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-06T14:05:02.257773Z"},"links":{"cited_paper":"/paper/2210.12873","citing_paper":"/paper/2507.21177"},"observation_digest":"sha256:56a8b939575035bc242db6493d0537f2226011c23eaa4cc185a084d3766267e1","observation_id":"dfa2fbd0-351d-47cb-a99d-90dc08d5a036","resolution":{"observed_at":"2026-08-06T14:05:02.466153Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T14:05:02.660170Z","title":null,"venue":null,"work_id":"0f58bc52-4f4e-48f6-b2c5-2f31e6868419","year":2022},"citing_paper":{"arxiv_id":"2507.21177","last_updated":"2025-07-26T07:00:32Z","snapshot_observed_at":"2026-08-09T13:16:39.804482Z","submitted_at":"2025-07-26T07:00:32Z","title":"FedBAP: Backdoor Defense via Benign Adversarial Perturbation in Federated Learning","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-06T14:05:02.301644Z"},"links":{"citing_paper":"/paper/2507.21177"},"observation_digest":"sha256:758cce28657f2ca2dc3c6e71d7b50c20b997e638bc705497e5fe2db7147901c2","observation_id":"559a3d8a-62f3-4714-a6a4-e1be1e08a4dd","resolution":{"observed_at":"2026-08-06T14:05:02.663474Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T14:05:02.650019Z","title":null,"venue":null,"work_id":"9b24a0e0-fbf4-42a6-a439-f77901ae895f","year":2022},"citing_paper":{"arxiv_id":"2507.21177","last_updated":"2025-07-26T07:00:32Z","snapshot_observed_at":"2026-08-09T13:16:39.804482Z","submitted_at":"2025-07-26T07:00:32Z","title":"FedBAP: Backdoor Defense via Benign Adversarial Perturbation in Federated Learning","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-06T14:05:02.304874Z"},"links":{"citing_paper":"/paper/2507.21177"},"observation_digest":"sha256:cf3cf5d1361929beb1cd1d0da3b8bc1e72749be9ea9d44f051d0976d6411e0d7","observation_id":"4ec4f08a-6b73-4270-b550-980a437ba5fc","resolution":{"observed_at":"2026-08-06T14:05:02.652934Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T14:05:02.640343Z","title":null,"venue":null,"work_id":"0c1f16f3-79d4-4eee-8f93-c1d8f13aca2a","year":2025},"citing_paper":{"arxiv_id":"2507.21177","last_updated":"2025-07-26T07:00:32Z","snapshot_observed_at":"2026-08-09T13:16:39.804482Z","submitted_at":"2025-07-26T07:00:32Z","title":"FedBAP: Backdoor Defense via Benign Adversarial Perturbation in Federated Learning","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-06T14:05:02.308125Z"},"links":{"citing_paper":"/paper/2507.21177"},"observation_digest":"sha256:55621c80cc4475d0f667499f4cfb70a469656e7d26feea0a2a8a68239b5c06fc","observation_id":"732c21f9-63c6-4d8b-8f34-9c680078628c","resolution":{"observed_at":"2026-08-06T14:05:02.643448Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T14:05:02.630703Z","title":null,"venue":null,"work_id":"99c95cfb-15b9-461d-89f3-6a53d35147da","year":2023},"citing_paper":{"arxiv_id":"2507.21177","last_updated":"2025-07-26T07:00:32Z","snapshot_observed_at":"2026-08-09T13:16:39.804482Z","submitted_at":"2025-07-26T07:00:32Z","title":"FedBAP: Backdoor Defense via Benign Adversarial Perturbation in Federated Learning","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-06T14:05:02.311980Z"},"links":{"citing_paper":"/paper/2507.21177"},"observation_digest":"sha256:74b4a9ad666c336a655064186d72ba4201d94ea2246bfdda82cefdf8f286b802","observation_id":"51be2f5d-bd63-420f-a863-0fcb406f2c30","resolution":{"observed_at":"2026-08-06T14:05:02.633638Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T14:05:02.621747Z","title":null,"venue":null,"work_id":"56aa64cb-86b8-4d87-b419-39d2a31061da","year":2023},"citing_paper":{"arxiv_id":"2507.21177","last_updated":"2025-07-26T07:00:32Z","snapshot_observed_at":"2026-08-09T13:16:39.804482Z","submitted_at":"2025-07-26T07:00:32Z","title":"FedBAP: Backdoor Defense via Benign Adversarial Perturbation in Federated Learning","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-06T14:05:02.315509Z"},"links":{"citing_paper":"/paper/2507.21177"},"observation_digest":"sha256:2e96f58b4798a7a73ddddb7d89e065beff49be95566ab8b57e5ba514b40ccc03","observation_id":"f7670d89-2c26-4387-af64-ca9b7a0073be","resolution":{"observed_at":"2026-08-06T14:05:02.624546Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2308.04466","last_updated":"2024-04-15T15:52:41Z","snapshot_observed_at":"2026-07-06T16:04:02.943124Z","submitted_at":"2023-08-08T05:46:47Z","title":"Backdoor Federated Learning by Poisoning Backdoor-Critical Layers","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2308.04466","snapshot_observed_at":"2026-08-06T14:05:02.319374Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.21177","last_updated":"2025-07-26T07:00:32Z","snapshot_observed_at":"2026-08-09T13:16:39.804482Z","submitted_at":"2025-07-26T07:00:32Z","title":"FedBAP: Backdoor Defense via Benign Adversarial Perturbation in Federated Learning","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-06T14:05:02.319374Z"},"links":{"cited_paper":"/paper/2308.04466","citing_paper":"/paper/2507.21177"},"observation_digest":"sha256:bcb0c873a1706c79d332b42b616e71bc3880d20cd53e7db12318f1280ba4c822","observation_id":"fbb7f0b8-aa73-448d-a832-89138ad2a6c7","resolution":{"observed_at":"2026-08-06T14:05:02.319374Z","resolver_source":null,"status":"malformed_identifier"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T14:05:02.942226Z","title":"Advances in Neural Information Processing Systems 30 (2017)","venue":null,"work_id":"6acf51c7-a2fe-4a99-b9c6-913d6fb7e411","year":2017},"citing_paper":{"arxiv_id":"2507.21177","last_updated":"2025-07-26T07:00:32Z","snapshot_observed_at":"2026-08-09T13:16:39.804482Z","submitted_at":"2025-07-26T07:00:32Z","title":"FedBAP: Backdoor Defense via Benign Adversarial Perturbation in Federated Learning","version":1},"reference_index":2017,"source":"pdf_text","source_observed_at":"2026-08-06T14:04:58.771743Z"},"links":{"citing_paper":"/paper/2507.21177"},"observation_digest":"sha256:bebeeeb0ef55115d3ef6d3eea2d65064b2d8c385147ea6973483b31b19826fb6","observation_id":"a4b255e4-77eb-44ca-ac7d-ebef123f2248","resolution":{"observed_at":"2026-08-06T14:05:02.945255Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1911.07963","last_updated":"2019-12-02T19:00:11Z","snapshot_observed_at":"2026-08-09T08:16:29.597021Z","submitted_at":"2019-11-18T21:25:03Z","title":"Can You Really Backdoor Federated Learning?","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1911.07963","snapshot_observed_at":"2026-08-06T14:05:01.129906Z","title":null,"venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2507.21177","last_updated":"2025-07-26T07:00:32Z","snapshot_observed_at":"2026-08-09T13:16:39.804482Z","submitted_at":"2025-07-26T07:00:32Z","title":"FedBAP: Backdoor Defense via Benign Adversarial Perturbation in Federated Learning","version":1},"reference_index":2019,"source":"pdf_text","source_observed_at":"2026-08-06T14:05:01.129906Z"},"links":{"cited_paper":"/paper/1911.07963","citing_paper":"/paper/2507.21177"},"observation_digest":"sha256:5d8c5745d9d739ab9f83b08857fadf3a2601db0c4e90661f048397f14b07da45","observation_id":"6f26540f-0dba-40e7-bc56-75dfe1b39f85","resolution":{"observed_at":"2026-08-06T14:05:01.129906Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T14:05:02.701118Z","title":"In Proceedings of the 2022 ACM on Asia Conference on Computer and Communications Security","venue":null,"work_id":"1a4c1b5f-fc32-4a3b-ad7b-2d68879e595d","year":2022},"citing_paper":{"arxiv_id":"2507.21177","last_updated":"2025-07-26T07:00:32Z","snapshot_observed_at":"2026-08-09T13:16:39.804482Z","submitted_at":"2025-07-26T07:00:32Z","title":"FedBAP: Backdoor Defense via Benign Adversarial Perturbation in Federated Learning","version":1},"reference_index":2022,"source":"pdf_text","source_observed_at":"2026-08-06T14:05:01.687265Z"},"links":{"citing_paper":"/paper/2507.21177"},"observation_digest":"sha256:6086038961f148424d239a8ba2aec2420b2975980197fe7a6cba732b0d6b926b","observation_id":"65a98601-edfb-43f2-b40f-e52229c1e021","resolution":{"observed_at":"2026-08-06T14:05:02.704210Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2507.21177","last_updated":"2025-07-26T07:00:32Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-09T13:16:39.804482Z","submitted_at":"2025-07-26T07:00:32Z","title":"FedBAP: Backdoor Defense via Benign Adversarial Perturbation in Federated Learning"},"reference_resolution":{"displayed":46,"state_counts":{"malformed_identifier":1,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":41,"verified_exact":2,"verified_fuzzy":2},"total_outbound_references":46},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"thesis":"As of 10 August 2026, this Paper Citation Record lists 46 of 46 outbound references and 0 inbound Pith citation observations for arXiv:2507.21177."}