{"as_of":"2026-08-15T05:31:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:fa774a931af19c18166da331270698efc95615d908a61d599e4a6ab5c59f7ca6","coverage":[{"denominator":24,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":24,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-05T11:12:08.373380Z","state":"measured"},{"denominator":24,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":24,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-14T06:32:32.682623+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2509.03108/citation-record","integrity":"/paper/2509.03108/integrity","json":"/paper/2509.03108/citation-record.json","paper":"/paper/2509.03108"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T11:12:12.483877Z","title":"Li and A","venue":null,"work_id":"a61d2ee8-2558-4d49-8589-d97a55b07f9d","year":2011},"citing_paper":{"arxiv_id":"2509.03108","last_updated":"2025-09-12T10:53:43Z","snapshot_observed_at":"2026-08-12T00:26:16.573774Z","submitted_at":"2025-09-03T08:05:36Z","title":"Backdoor Poisoning Attack Against Face Spoofing Attack Detection Methods","version":2},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-05T11:12:06.496553Z"},"links":{"citing_paper":"/paper/2509.03108"},"observation_digest":"sha256:8b5e6822c594ddaf17ed731d5d8731bd499137af20389cb8833a01a0a1d3ee32","observation_id":"b05d422a-0b28-480a-8d4d-8dd7631e366b","resolution":{"observed_at":"2026-08-05T11:12:12.530355Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T11:12:06.565399Z","title":"Goodfellow, Y","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2509.03108","last_updated":"2025-09-12T10:53:43Z","snapshot_observed_at":"2026-08-12T00:26:16.573774Z","submitted_at":"2025-09-03T08:05:36Z","title":"Backdoor Poisoning Attack Against Face Spoofing Attack Detection Methods","version":2},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-05T11:12:06.565399Z"},"links":{"citing_paper":"/paper/2509.03108"},"observation_digest":"sha256:0f1cde282806d68039d3e12e7ddcbca15f9cefc4542dee43722b32366a00ddf5","observation_id":"4c2843ab-9bc6-4b1e-86c5-35a5246734c0","resolution":{"observed_at":"2026-08-05T11:12:06.565399Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T11:12:12.349613Z","title":"Marcel, M","venue":null,"work_id":"58df2978-0753-4540-b512-083348b5dd2b","year":2019},"citing_paper":{"arxiv_id":"2509.03108","last_updated":"2025-09-12T10:53:43Z","snapshot_observed_at":"2026-08-12T00:26:16.573774Z","submitted_at":"2025-09-03T08:05:36Z","title":"Backdoor Poisoning Attack Against Face Spoofing Attack Detection Methods","version":2},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-05T11:12:06.659633Z"},"links":{"citing_paper":"/paper/2509.03108"},"observation_digest":"sha256:3e0f00dc25e26bc60138132d8fe81c3c4ca05edd2894005b01a6696c26c9ad45","observation_id":"cbbb2048-3df1-4408-8eeb-0939c5004ba5","resolution":{"observed_at":"2026-08-05T11:12:12.426731Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T11:12:12.113989Z","title":"An image is worth 16x16 words: Transformers for image recognition at scale,","venue":null,"work_id":"25156aa6-771b-470d-8c8b-bd8cd5cdfcf3","year":2021},"citing_paper":{"arxiv_id":"2509.03108","last_updated":"2025-09-12T10:53:43Z","snapshot_observed_at":"2026-08-12T00:26:16.573774Z","submitted_at":"2025-09-03T08:05:36Z","title":"Backdoor Poisoning Attack Against Face Spoofing Attack Detection Methods","version":2},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-05T11:12:06.732947Z"},"links":{"citing_paper":"/paper/2509.03108"},"observation_digest":"sha256:d79b6bcb3973fe69514c111839484585214e390f6e2f17853bd7bc7bd16ca5dc","observation_id":"a8ad1a47-7f84-4f8a-a304-5d5f8e56068a","resolution":{"observed_at":"2026-08-05T11:12:12.248479Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T11:12:11.893816Z","title":"Learning deep models fo r face anti-spoofing: Binary or auxiliary supervision,","venue":null,"work_id":"4abff913-dd3e-4792-99a5-0c3ff70273f8","year":2018},"citing_paper":{"arxiv_id":"2509.03108","last_updated":"2025-09-12T10:53:43Z","snapshot_observed_at":"2026-08-12T00:26:16.573774Z","submitted_at":"2025-09-03T08:05:36Z","title":"Backdoor Poisoning Attack Against Face Spoofing Attack Detection Methods","version":2},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-05T11:12:06.795785Z"},"links":{"citing_paper":"/paper/2509.03108"},"observation_digest":"sha256:da62f22870dd7b9d4638f0a92fb71697a4ff4f4a65e70290ff29ae260c40fc2c","observation_id":"bc34e561-d9d7-47f1-b4d8-fad1183470db","resolution":{"observed_at":"2026-08-05T11:12:11.999564Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T11:12:11.650512Z","title":"On disentangling spoof trace for generic face anti-spoofing,","venue":null,"work_id":"20ea7618-2ec3-41bd-9d0b-3986cab564f6","year":2020},"citing_paper":{"arxiv_id":"2509.03108","last_updated":"2025-09-12T10:53:43Z","snapshot_observed_at":"2026-08-12T00:26:16.573774Z","submitted_at":"2025-09-03T08:05:36Z","title":"Backdoor Poisoning Attack Against Face Spoofing Attack Detection Methods","version":2},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-05T11:12:06.897131Z"},"links":{"citing_paper":"/paper/2509.03108"},"observation_digest":"sha256:c648a666c49c88786d4ad27d55d0643304bfaedcf6030c804aca8ffb98adcc9f","observation_id":"102c1dce-8c5d-43ab-a524-94e753c92d99","resolution":{"observed_at":"2026-08-05T11:12:11.789060Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T11:12:11.407626Z","title":"Deep lear ning for face anti-spoofing: A survey,","venue":null,"work_id":"aaef8302-2e62-4ecd-a22a-36ef21daf04a","year":2023},"citing_paper":{"arxiv_id":"2509.03108","last_updated":"2025-09-12T10:53:43Z","snapshot_observed_at":"2026-08-12T00:26:16.573774Z","submitted_at":"2025-09-03T08:05:36Z","title":"Backdoor Poisoning Attack Against Face Spoofing Attack Detection Methods","version":2},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-05T11:12:06.995590Z"},"links":{"citing_paper":"/paper/2509.03108"},"observation_digest":"sha256:98c29dfe3e61494663b06a5b4e125b42796c70de73e351c003805c7558b9c6cf","observation_id":"002f2103-ef86-46db-ab28-ddcb2f27fc36","resolution":{"observed_at":"2026-08-05T11:12:11.519288Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T11:12:11.146476Z","title":"Badnets: Eva luating backdooring attacks on deep neural networks,","venue":null,"work_id":"31af4395-043f-4afb-b57d-80ce02f66ad8","year":2019},"citing_paper":{"arxiv_id":"2509.03108","last_updated":"2025-09-12T10:53:43Z","snapshot_observed_at":"2026-08-12T00:26:16.573774Z","submitted_at":"2025-09-03T08:05:36Z","title":"Backdoor Poisoning Attack Against Face Spoofing Attack Detection Methods","version":2},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-05T11:12:07.097465Z"},"links":{"citing_paper":"/paper/2509.03108"},"observation_digest":"sha256:ac7edd8ddc25b0772a48b605c28fb855873f1cd6103904c0c63b1e377bee37a1","observation_id":"b4b50dbf-270a-4161-8a03-1b3679830c79","resolution":{"observed_at":"2026-08-05T11:12:11.253575Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T11:12:10.960979Z","title":"Trojaning attack on neural networks,","venue":null,"work_id":"0706b727-1f55-422f-9908-ea0d175b0514","year":2018},"citing_paper":{"arxiv_id":"2509.03108","last_updated":"2025-09-12T10:53:43Z","snapshot_observed_at":"2026-08-12T00:26:16.573774Z","submitted_at":"2025-09-03T08:05:36Z","title":"Backdoor Poisoning Attack Against Face Spoofing Attack Detection Methods","version":2},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-05T11:12:07.169314Z"},"links":{"citing_paper":"/paper/2509.03108"},"observation_digest":"sha256:b3551d4457d8d78ca784a90d56afd0f86c2afe1d58402637a4dc0465bca89eff","observation_id":"7d8bc5ab-10e9-4279-9830-a901a3149622","resolution":{"observed_at":"2026-08-05T11:12:11.100085Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T11:12:10.746058Z","title":"Backdoor learning : A survey,","venue":null,"work_id":"d9e21e8f-c398-46b5-9937-4d783e0abe5e","year":2022},"citing_paper":{"arxiv_id":"2509.03108","last_updated":"2025-09-12T10:53:43Z","snapshot_observed_at":"2026-08-12T00:26:16.573774Z","submitted_at":"2025-09-03T08:05:36Z","title":"Backdoor Poisoning Attack Against Face Spoofing Attack Detection Methods","version":2},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-05T11:12:07.267412Z"},"links":{"citing_paper":"/paper/2509.03108"},"observation_digest":"sha256:e10e754e9ed40966c33fcb2a1f778f7b7ed558f398122bc766dea1b87f0551fe","observation_id":"ccc9531c-0d27-4572-9524-ba5b74bc0792","resolution":{"observed_at":"2026-08-05T11:12:10.844621Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T11:12:10.605739Z","title":"A compr ehensive survey on backdoor attacks and their defenses in face recogn ition systems,","venue":null,"work_id":"327b6db4-172b-4299-97cb-cb4ab53e2646","year":2023},"citing_paper":{"arxiv_id":"2509.03108","last_updated":"2025-09-12T10:53:43Z","snapshot_observed_at":"2026-08-12T00:26:16.573774Z","submitted_at":"2025-09-03T08:05:36Z","title":"Backdoor Poisoning Attack Against Face Spoofing Attack Detection Methods","version":2},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-05T11:12:07.371655Z"},"links":{"citing_paper":"/paper/2509.03108"},"observation_digest":"sha256:5b0f4ca14d8aeb0cf6112ef86a82afc8897086e8e7a8e62dec76656bab34a561","observation_id":"f54fa945-b940-405c-95d6-4d329ad8094e","resolution":{"observed_at":"2026-08-05T11:12:10.672808Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T11:12:10.434400Z","title":"Face image de-identifica tion based on feature embedding for privacy protection,","venue":null,"work_id":"6e7c143e-94fa-4c7d-8183-345ba628aa6c","year":2023},"citing_paper":{"arxiv_id":"2509.03108","last_updated":"2025-09-12T10:53:43Z","snapshot_observed_at":"2026-08-12T00:26:16.573774Z","submitted_at":"2025-09-03T08:05:36Z","title":"Backdoor Poisoning Attack Against Face Spoofing Attack Detection Methods","version":2},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-05T11:12:07.477963Z"},"links":{"citing_paper":"/paper/2509.03108"},"observation_digest":"sha256:1a86cbe32faae2b58b940850ca7a945798de7e197b40f066e46a10dc862fb973","observation_id":"382bded9-af45-4f4c-9b1f-bacd997cceea","resolution":{"observed_at":"2026-08-05T11:12:10.515974Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T11:12:10.238522Z","title":"Face image de-identifica tion based on feature embedding,","venue":null,"work_id":"a85da195-b7fa-4f93-9bb9-38fba4aa2743","year":2024},"citing_paper":{"arxiv_id":"2509.03108","last_updated":"2025-09-12T10:53:43Z","snapshot_observed_at":"2026-08-12T00:26:16.573774Z","submitted_at":"2025-09-03T08:05:36Z","title":"Backdoor Poisoning Attack Against Face Spoofing Attack Detection Methods","version":2},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-05T11:12:07.579492Z"},"links":{"citing_paper":"/paper/2509.03108"},"observation_digest":"sha256:44ec206aca4a051ca5f65e9244fb5a979f1be6996ef43c2cc85717f8f3b647fd","observation_id":"4e7c4ca1-646e-46d2-900b-88ab7fba969e","resolution":{"observed_at":"2026-08-05T11:12:10.345411Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T11:12:10.091824Z","title":"OULU-NPU: A mobile face presentation attack database with real- world variations,","venue":null,"work_id":"7d556d2a-92cd-400c-8d61-5c537e8b2e92","year":2017},"citing_paper":{"arxiv_id":"2509.03108","last_updated":"2025-09-12T10:53:43Z","snapshot_observed_at":"2026-08-12T00:26:16.573774Z","submitted_at":"2025-09-03T08:05:36Z","title":"Backdoor Poisoning Attack Against Face Spoofing Attack Detection Methods","version":2},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-05T11:12:07.654398Z"},"links":{"citing_paper":"/paper/2509.03108"},"observation_digest":"sha256:5040d1ae6940114e400aee8ce4f7f381f434caf7d0b2613f9a3394b54ca522f4","observation_id":"e970194e-d069-4714-86b3-022ea6653cbe","resolution":{"observed_at":"2026-08-05T11:12:10.174932Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T11:12:09.917663Z","title":"Towards face encryption by generating adversarial identity masks,","venue":null,"work_id":"9c33942b-0dff-469b-9739-19c6db75f64c","year":2021},"citing_paper":{"arxiv_id":"2509.03108","last_updated":"2025-09-12T10:53:43Z","snapshot_observed_at":"2026-08-12T00:26:16.573774Z","submitted_at":"2025-09-03T08:05:36Z","title":"Backdoor Poisoning Attack Against Face Spoofing Attack Detection Methods","version":2},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-05T11:12:07.730210Z"},"links":{"citing_paper":"/paper/2509.03108"},"observation_digest":"sha256:ea7d2ee900686b48a570f938c2990ecff128bddff1771f4b7065c519ec9be328","observation_id":"8f08c084-7c69-4bf1-abe7-a5b4801b1e1e","resolution":{"observed_at":"2026-08-05T11:12:10.000977Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2007.04118","last_updated":"2021-09-29T08:01:13Z","snapshot_observed_at":"2026-08-10T11:02:47.969382Z","submitted_at":"2020-07-08T13:39:22Z","title":"RobFR: Benchmarking Adversarial Robustness on Face Recognition","version":2},"cited_work":{"arxiv_id":"2007.04118","doi":null,"metadata_source":"pith","pith_arxiv_id":"2007.04118","snapshot_observed_at":"2026-08-05T11:12:08.478746Z","title":"RobFR: Benchmarking Adversarial Robustness on Face Recognition","venue":"cs.CV","work_id":"5c7d2869-6922-43f5-9a15-4716c17a8a4e","year":2020},"citing_paper":{"arxiv_id":"2509.03108","last_updated":"2025-09-12T10:53:43Z","snapshot_observed_at":"2026-08-12T00:26:16.573774Z","submitted_at":"2025-09-03T08:05:36Z","title":"Backdoor Poisoning Attack Against Face Spoofing Attack Detection Methods","version":2},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-05T11:12:07.784971Z"},"links":{"cited_paper":"/paper/2007.04118","citing_paper":"/paper/2509.03108"},"observation_digest":"sha256:61a302c0fa129cb4ef2b5b035c2b5873e329e39dc3f14d93c900aeeb3389a510","observation_id":"ca9bd857-08c4-498e-acfa-daa4255e9561","resolution":{"observed_at":"2026-08-05T11:12:08.541695Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T11:12:09.718367Z","title":"Integrating structured biological data by kernel maximum mean discrepancy,","venue":null,"work_id":"1231d337-7fb4-4ae9-b87d-c62b1801fd13","year":2006},"citing_paper":{"arxiv_id":"2509.03108","last_updated":"2025-09-12T10:53:43Z","snapshot_observed_at":"2026-08-12T00:26:16.573774Z","submitted_at":"2025-09-03T08:05:36Z","title":"Backdoor Poisoning Attack Against Face Spoofing Attack Detection Methods","version":2},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-05T11:12:07.866899Z"},"links":{"citing_paper":"/paper/2509.03108"},"observation_digest":"sha256:51fd9a7c628bff1af178c4811eded27a482a1b371af15d8237c1ba57977e49d7","observation_id":"95668697-09b8-452b-8a7f-bddf963f50a7","resolution":{"observed_at":"2026-08-05T11:12:09.825120Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T11:12:09.575121Z","title":"U-Net: Convol utional net- works for biomedical image segmentation,","venue":null,"work_id":"20dc18f8-6e3f-42ad-b79a-12d2835dc07d","year":2015},"citing_paper":{"arxiv_id":"2509.03108","last_updated":"2025-09-12T10:53:43Z","snapshot_observed_at":"2026-08-12T00:26:16.573774Z","submitted_at":"2025-09-03T08:05:36Z","title":"Backdoor Poisoning Attack Against Face Spoofing Attack Detection Methods","version":2},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-05T11:12:07.923375Z"},"links":{"citing_paper":"/paper/2509.03108"},"observation_digest":"sha256:52cb080ccf592c790d1ecf8d4d212c72ffb446ad789005ddb00608389b6c7b99","observation_id":"e9d08cb7-7218-4b86-88c6-415efc99c211","resolution":{"observed_at":"2026-08-05T11:12:09.654338Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T11:12:09.406882Z","title":"Deep residual learni ng for image recognition,","venue":null,"work_id":"6efa851f-ef3b-453f-8517-34f9cf075a5d","year":2016},"citing_paper":{"arxiv_id":"2509.03108","last_updated":"2025-09-12T10:53:43Z","snapshot_observed_at":"2026-08-12T00:26:16.573774Z","submitted_at":"2025-09-03T08:05:36Z","title":"Backdoor Poisoning Attack Against Face Spoofing Attack Detection Methods","version":2},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-05T11:12:08.003054Z"},"links":{"citing_paper":"/paper/2509.03108"},"observation_digest":"sha256:6e6380f9b5d57433d360579e5a5e16342eb16b9ffbb64f33300c0f0d5a8122d4","observation_id":"ceb57863-4ea8-47d1-976a-19acccfae133","resolution":{"observed_at":"2026-08-05T11:12:09.491393Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T11:12:09.267145Z","title":"ArcFace: Additive an gular margin loss for deep face recognition,","venue":null,"work_id":"5cf39e57-72e9-4fac-99f5-025e1800f379","year":2019},"citing_paper":{"arxiv_id":"2509.03108","last_updated":"2025-09-12T10:53:43Z","snapshot_observed_at":"2026-08-12T00:26:16.573774Z","submitted_at":"2025-09-03T08:05:36Z","title":"Backdoor Poisoning Attack Against Face Spoofing Attack Detection Methods","version":2},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-05T11:12:08.059986Z"},"links":{"citing_paper":"/paper/2509.03108"},"observation_digest":"sha256:2dcbf629542fdbc5aa35f9aa2ae525eb2db1b49a9b187efb0c3fa00b816517ed","observation_id":"c534381d-a5fa-4308-83ab-e9c79aac0ed1","resolution":{"observed_at":"2026-08-05T11:12:09.348013Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T11:12:09.099008Z","title":"Deep learning face a ttributes in the wild,","venue":null,"work_id":"7b22ebb3-99da-4887-853a-b5f7694f6297","year":2015},"citing_paper":{"arxiv_id":"2509.03108","last_updated":"2025-09-12T10:53:43Z","snapshot_observed_at":"2026-08-12T00:26:16.573774Z","submitted_at":"2025-09-03T08:05:36Z","title":"Backdoor Poisoning Attack Against Face Spoofing Attack Detection Methods","version":2},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-05T11:12:08.146900Z"},"links":{"citing_paper":"/paper/2509.03108"},"observation_digest":"sha256:5b0adcc2f16bb98ad5fba2204b01b1b86fe5e80fedd23babaa7683956fc233ab","observation_id":"d1c6df91-647c-4b23-9658-4b15818967cd","resolution":{"observed_at":"2026-08-05T11:12:09.179260Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T11:12:08.932852Z","title":"Adam: A method for stochastic optim ization,","venue":null,"work_id":"e712c7be-9f8c-4aaa-8ca6-e14e8794ca9e","year":2015},"citing_paper":{"arxiv_id":"2509.03108","last_updated":"2025-09-12T10:53:43Z","snapshot_observed_at":"2026-08-12T00:26:16.573774Z","submitted_at":"2025-09-03T08:05:36Z","title":"Backdoor Poisoning Attack Against Face Spoofing Attack Detection Methods","version":2},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-05T11:12:08.228210Z"},"links":{"citing_paper":"/paper/2509.03108"},"observation_digest":"sha256:28d2b30841633c23f9da51a97735ce71a260591442b0e9e1caecc624bca8318f","observation_id":"24c8e398-f4a2-4155-a742-62ece320a5ad","resolution":{"observed_at":"2026-08-05T11:12:09.011822Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T11:12:08.768393Z","title":"Patchnet: A simple face anti-spoofing framework via fine-grained patch recogni tion,","venue":null,"work_id":"f519d170-484f-4e57-8ba7-bc051e11e036","year":2022},"citing_paper":{"arxiv_id":"2509.03108","last_updated":"2025-09-12T10:53:43Z","snapshot_observed_at":"2026-08-12T00:26:16.573774Z","submitted_at":"2025-09-03T08:05:36Z","title":"Backdoor Poisoning Attack Against Face Spoofing Attack Detection Methods","version":2},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-05T11:12:08.286188Z"},"links":{"citing_paper":"/paper/2509.03108"},"observation_digest":"sha256:9c2a7084b3188b320e467a8be74fbedaa75cbb5e9a4cbb52d494c372bc47b8f5","observation_id":"9cb38b8f-29a6-4df0-9084-1582b2aa26fd","resolution":{"observed_at":"2026-08-05T11:12:08.844612Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T11:12:08.602216Z","title":"The unreasonable effectiveness of deep features as a perceptua l metric,","venue":null,"work_id":"d404b5f4-f1eb-41b8-bc3a-1e0417f00741","year":2018},"citing_paper":{"arxiv_id":"2509.03108","last_updated":"2025-09-12T10:53:43Z","snapshot_observed_at":"2026-08-12T00:26:16.573774Z","submitted_at":"2025-09-03T08:05:36Z","title":"Backdoor Poisoning Attack Against Face Spoofing Attack Detection Methods","version":2},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-05T11:12:08.373380Z"},"links":{"citing_paper":"/paper/2509.03108"},"observation_digest":"sha256:c934ae793d3f1284b2fe7e28b8eb7484f216fee44b5294c524099759b1cd7f0c","observation_id":"1bdb9a7d-105b-4992-bea8-3e8e60eceb9f","resolution":{"observed_at":"2026-08-05T11:12:08.680433Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2509.03108","last_updated":"2025-09-12T10:53:43Z","latest_version":2,"primary_category":"cs.CV","snapshot_observed_at":"2026-08-12T00:26:16.573774Z","submitted_at":"2025-09-03T08:05:36Z","title":"Backdoor Poisoning Attack Against Face Spoofing Attack Detection Methods"},"reference_resolution":{"displayed":24,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":1,"verified_exact":1,"verified_fuzzy":22},"total_outbound_references":24},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"thesis":"As of 15 August 2026, this Paper Citation Record lists 24 of 24 outbound references and 0 inbound Pith citation observations for arXiv:2509.03108."}