{"as_of":"2026-08-06T03:03:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:31d45758e690145af87d7b061e5f0afba1a9b8e91efff6390fc91cd0ba5bacfe","coverage":[{"denominator":47,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":47,"source":"paper_references, paper_reference_links","source_observed_at":"2026-05-14T00:24:22.292451Z","state":"measured"},{"denominator":48,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":48,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-05T06:32:48.257954+00:00","state":"measured"},{"denominator":1,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":1,"source":"paper_references, paper_reference_links","source_observed_at":"2026-06-25T20:12:50.848080Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"pith","source_observed_at":"2026-07-04T20:20:07.895964Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2603.29328","last_updated":"2026-04-07T04:38:05Z","snapshot_observed_at":"2026-08-03T15:47:55.167323Z","submitted_at":"2026-03-31T06:48:25Z","title":"Beyond Corner Patches: Semantics-Aware Backdoor Attack in Federated Learning","version":3},"cited_work":{"arxiv_id":"2603.29328","doi":null,"metadata_source":"pith","pith_arxiv_id":"2603.29328","snapshot_observed_at":"2026-07-04T20:20:07.895964Z","title":"Beyond Corner Patches: Semantics-Aware Backdoor Attack in Federated Learning","venue":"cs.CR","work_id":"d4e8e5e4-dbd8-467b-b79a-40cbcc7be6c9","year":2026},"citing_paper":{"arxiv_id":"2606.25858","last_updated":"2026-06-24T14:07:10Z","snapshot_observed_at":"2026-07-07T00:00:17.090702Z","submitted_at":"2026-06-24T14:07:10Z","title":"Color Matters: Trigger Color Affects Success in Federated Backdoor Attacks","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-06-25T20:12:50.848080Z"},"links":{"cited_paper":"/paper/2603.29328","citing_paper":"/paper/2606.25858"},"observation_digest":"sha256:87510e5754d52ac667cd1448d12a6be63c74cc356d4e705c27d661097f335fd4","observation_id":"b2616209-47eb-4f4f-9373-a8702bc9eac5","resolution":{"observed_at":"2026-07-04T20:20:07.897326Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2603.29328/citation-record","integrity":"/paper/2603.29328/integrity","json":"/paper/2603.29328/citation-record.json","paper":"/paper/2603.29328"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Communication-efficient learning of deep networks from decentralized data","venue":null,"work_id":"2d26c967-2c3b-4d4c-8039-ec27cbfeb3c6","year":2017},"citing_paper":{"arxiv_id":"2603.29328","last_updated":"2026-04-07T04:38:05Z","snapshot_observed_at":"2026-08-03T15:47:55.167323Z","submitted_at":"2026-03-31T06:48:25Z","title":"Beyond Corner Patches: Semantics-Aware Backdoor Attack in Federated Learning","version":3},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-05-14T00:24:22.292451Z"},"links":{"citing_paper":"/paper/2603.29328"},"observation_digest":"sha256:2b9021b19e92a6db1a0c725745ac5305585a83de0fe2d36a240106ab0418e2d4","observation_id":"882dfbaa-0c26-42ec-af41-a6c45864f567","resolution":{"observed_at":"2026-05-14T00:28:30.854488Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Advances and open problems in federated learning","venue":null,"work_id":"8ad5704e-edce-4608-87e0-59f6d3031d4a","year":2021},"citing_paper":{"arxiv_id":"2603.29328","last_updated":"2026-04-07T04:38:05Z","snapshot_observed_at":"2026-08-03T15:47:55.167323Z","submitted_at":"2026-03-31T06:48:25Z","title":"Beyond Corner Patches: Semantics-Aware Backdoor Attack in Federated Learning","version":3},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-05-14T00:24:22.292451Z"},"links":{"citing_paper":"/paper/2603.29328"},"observation_digest":"sha256:5c75fb4e10aa0c125eec1940cc8eced654f25a1754707d8e6f80b198a6e3a14e","observation_id":"18a3c7ab-f9ee-4ad7-b5fb-cba104c62473","resolution":{"observed_at":"2026-05-14T00:28:30.913122Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"A survey on federated learning: The journey from centralized to distributed on-site learning and beyond","venue":null,"work_id":"db108f0d-367f-48af-ad68-c1d8fe17a56c","year":2021},"citing_paper":{"arxiv_id":"2603.29328","last_updated":"2026-04-07T04:38:05Z","snapshot_observed_at":"2026-08-03T15:47:55.167323Z","submitted_at":"2026-03-31T06:48:25Z","title":"Beyond Corner Patches: Semantics-Aware Backdoor Attack in Federated Learning","version":3},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-05-14T00:24:22.292451Z"},"links":{"citing_paper":"/paper/2603.29328"},"observation_digest":"sha256:1f83c41cedbbd1456a4f0efc62753e14cb3edcdd5df22e2b7a1ce99fdc5221b7","observation_id":"ce1b503d-c64b-44b9-b8e9-5ac81377a531","resolution":{"observed_at":"2026-05-14T00:28:30.916475Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"The federation strikes back: A survey of federated learning privacy attacks, defenses, applications, and policy landscape","venue":null,"work_id":"69ee5956-e53d-4f51-8bc1-e1d40523cae3","year":2025},"citing_paper":{"arxiv_id":"2603.29328","last_updated":"2026-04-07T04:38:05Z","snapshot_observed_at":"2026-08-03T15:47:55.167323Z","submitted_at":"2026-03-31T06:48:25Z","title":"Beyond Corner Patches: Semantics-Aware Backdoor Attack in Federated Learning","version":3},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-05-14T00:24:22.292451Z"},"links":{"citing_paper":"/paper/2603.29328"},"observation_digest":"sha256:d62410ca8aadb4045385eef4f7e47cfbed67495e04a591fd7747bc80b8f1b051","observation_id":"7663c081-3309-47fe-9a6e-bc499a68218b","resolution":{"observed_at":"2026-05-14T00:28:30.920668Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Leak and learn: An attacker’s cookbook to train using leaked data from federated learning","venue":null,"work_id":"b8a9843b-79cb-4a38-8079-c1458f5fa0cb","year":2024},"citing_paper":{"arxiv_id":"2603.29328","last_updated":"2026-04-07T04:38:05Z","snapshot_observed_at":"2026-08-03T15:47:55.167323Z","submitted_at":"2026-03-31T06:48:25Z","title":"Beyond Corner Patches: Semantics-Aware Backdoor Attack in Federated Learning","version":3},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-05-14T00:24:22.292451Z"},"links":{"citing_paper":"/paper/2603.29328"},"observation_digest":"sha256:22666e0d861eff3f255a44052b313793a554f20dcc6ec66ce0cc87b0d46661e3","observation_id":"9a1ef0c6-b1d9-42c8-a197-b7d9237d5ef2","resolution":{"observed_at":"2026-05-14T00:28:30.909490Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Federated learning: Strategies for improving communication efficiency","venue":null,"work_id":"a6eb5e92-f8e3-49d8-a06d-8daccdf4396b","year":2016},"citing_paper":{"arxiv_id":"2603.29328","last_updated":"2026-04-07T04:38:05Z","snapshot_observed_at":"2026-08-03T15:47:55.167323Z","submitted_at":"2026-03-31T06:48:25Z","title":"Beyond Corner Patches: Semantics-Aware Backdoor Attack in Federated Learning","version":3},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-05-14T00:24:22.292451Z"},"links":{"citing_paper":"/paper/2603.29328"},"observation_digest":"sha256:ee27e1fe6cc3a3b0c965cec7f97d3587cb97f0e65e889581fbde3142297de70c","observation_id":"afe8aa4a-5f71-45c7-b256-36a92c0e315c","resolution":{"observed_at":"2026-05-14T00:28:30.901659Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1811.03604","last_updated":"2019-02-28T21:07:51Z","snapshot_observed_at":"2026-07-06T07:13:34.019157Z","submitted_at":"2018-11-08T18:37:03Z","title":"Federated Learning for Mobile Keyboard Prediction","version":2},"cited_work":{"arxiv_id":"1811.03604","doi":"10.48550/arxiv.1811.03604","metadata_source":"pith","pith_arxiv_id":"1811.03604","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Federated Learning for Mobile Keyboard Prediction","venue":"cs.CL","work_id":"bee947a7-dcaf-4762-81a5-b75eead51908","year":2018},"citing_paper":{"arxiv_id":"2603.29328","last_updated":"2026-04-07T04:38:05Z","snapshot_observed_at":"2026-08-03T15:47:55.167323Z","submitted_at":"2026-03-31T06:48:25Z","title":"Beyond Corner Patches: Semantics-Aware Backdoor Attack in Federated Learning","version":3},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-05-14T00:24:22.292451Z"},"links":{"cited_paper":"/paper/1811.03604","citing_paper":"/paper/2603.29328"},"observation_digest":"sha256:8414f7e90960a5d224733b3e4f4b73f6c0cfd155a06b30823f4e9cb1c80d0621","observation_id":"1d4b439e-b777-4b40-8173-112fd3137d91","resolution":{"observed_at":"2026-05-14T00:28:30.114183Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"The resource problem of using linear layer leakage attack in federated learning","venue":null,"work_id":"a9dae59d-e567-4172-8d75-2016b1c3562c","year":2023},"citing_paper":{"arxiv_id":"2603.29328","last_updated":"2026-04-07T04:38:05Z","snapshot_observed_at":"2026-08-03T15:47:55.167323Z","submitted_at":"2026-03-31T06:48:25Z","title":"Beyond Corner Patches: Semantics-Aware Backdoor Attack in Federated Learning","version":3},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-05-14T00:24:22.292451Z"},"links":{"citing_paper":"/paper/2603.29328"},"observation_digest":"sha256:f4aa7c435628c34bf016f1904de21966190ea972d89065667afd75e40c7ffd76","observation_id":"b2a2e21c-d935-4022-9ef8-3b57a90935fb","resolution":{"observed_at":"2026-05-14T00:28:30.898069Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Loki: Large-scale data reconstruction attack against federated learning through model manipulation","venue":null,"work_id":"6c1a3a23-a4a0-4040-bc69-c1fad01094e9","year":2024},"citing_paper":{"arxiv_id":"2603.29328","last_updated":"2026-04-07T04:38:05Z","snapshot_observed_at":"2026-08-03T15:47:55.167323Z","submitted_at":"2026-03-31T06:48:25Z","title":"Beyond Corner Patches: Semantics-Aware Backdoor Attack in Federated Learning","version":3},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-05-14T00:24:22.292451Z"},"links":{"citing_paper":"/paper/2603.29328"},"observation_digest":"sha256:d4151de28f7e0b2b98789fb7cd2f7214327d99ede9c6e4745d43152759650f28","observation_id":"2bfbdfdb-3fdf-4b79-9870-3956f4a19992","resolution":{"observed_at":"2026-05-14T00:28:30.905358Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Federated opti- mization in heterogeneous networks","venue":null,"work_id":"0a0f8f45-6030-41b6-bc99-8fedbe0bff94","year":2020},"citing_paper":{"arxiv_id":"2603.29328","last_updated":"2026-04-07T04:38:05Z","snapshot_observed_at":"2026-08-03T15:47:55.167323Z","submitted_at":"2026-03-31T06:48:25Z","title":"Beyond Corner Patches: Semantics-Aware Backdoor Attack in Federated Learning","version":3},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-05-14T00:24:22.292451Z"},"links":{"citing_paper":"/paper/2603.29328"},"observation_digest":"sha256:8f285d36083461014483c5d4fad076b8241af425d3f8dca0242c183be1c23a67","observation_id":"67deb057-6817-4f94-a370-82bb9d0288fc","resolution":{"observed_at":"2026-05-14T00:28:30.924562Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"How to backdoor federated learning","venue":null,"work_id":"7d76fdf8-fc73-41f4-84c9-86eee247655c","year":2020},"citing_paper":{"arxiv_id":"2603.29328","last_updated":"2026-04-07T04:38:05Z","snapshot_observed_at":"2026-08-03T15:47:55.167323Z","submitted_at":"2026-03-31T06:48:25Z","title":"Beyond Corner Patches: Semantics-Aware Backdoor Attack in Federated Learning","version":3},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-05-14T00:24:22.292451Z"},"links":{"citing_paper":"/paper/2603.29328"},"observation_digest":"sha256:b238e0a008ac97cdd1b5419c951003fd884e220f33f7eec861eb9c1eaa1dd08e","observation_id":"aea4b210-bc7f-43ce-ae6f-61e45537079c","resolution":{"observed_at":"2026-05-14T00:28:30.932694Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Analyzing federated learning through an adversarial lens","venue":null,"work_id":"d4e370e1-4781-48f9-ab11-2de8f54716ed","year":2019},"citing_paper":{"arxiv_id":"2603.29328","last_updated":"2026-04-07T04:38:05Z","snapshot_observed_at":"2026-08-03T15:47:55.167323Z","submitted_at":"2026-03-31T06:48:25Z","title":"Beyond Corner Patches: Semantics-Aware Backdoor Attack in Federated Learning","version":3},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-05-14T00:24:22.292451Z"},"links":{"citing_paper":"/paper/2603.29328"},"observation_digest":"sha256:21df9b0af6920fda5f09b11480bb89a934e01e9a161754afabef16ec1b2ca5f7","observation_id":"081048ff-c413-4953-8fe3-74e187f5c97c","resolution":{"observed_at":"2026-05-14T00:28:30.894472Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Attack of the tails: Yes, you really can backdoor federated learning","venue":null,"work_id":"a35bec0e-2549-4734-a8d7-81de46d5c241","year":2020},"citing_paper":{"arxiv_id":"2603.29328","last_updated":"2026-04-07T04:38:05Z","snapshot_observed_at":"2026-08-03T15:47:55.167323Z","submitted_at":"2026-03-31T06:48:25Z","title":"Beyond Corner Patches: Semantics-Aware Backdoor Attack in Federated Learning","version":3},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-05-14T00:24:22.292451Z"},"links":{"citing_paper":"/paper/2603.29328"},"observation_digest":"sha256:5a0a3959011e703380dda1eb2dd5b34434981e0924859b28e80b4a83333d48df","observation_id":"ebcd0ea0-cda3-4a0c-8050-8d1b8ed9964e","resolution":{"observed_at":"2026-05-14T00:28:30.886445Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Badnets: Identifying vulnerabilities in the machine learning model supply chain","venue":null,"work_id":"9ec77b11-1ddb-4561-91c4-3a195eccc41c","year":2017},"citing_paper":{"arxiv_id":"2603.29328","last_updated":"2026-04-07T04:38:05Z","snapshot_observed_at":"2026-08-03T15:47:55.167323Z","submitted_at":"2026-03-31T06:48:25Z","title":"Beyond Corner Patches: Semantics-Aware Backdoor Attack in Federated Learning","version":3},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-05-14T00:24:22.292451Z"},"links":{"citing_paper":"/paper/2603.29328"},"observation_digest":"sha256:a64e42aff284bf952a1775a2a55eefd10a9201cbdd1bcae715e0e64904285f0a","observation_id":"3eeb1038-8ca5-4d3d-97f0-493989dada61","resolution":{"observed_at":"2026-05-14T00:28:30.890781Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1712.05526","last_updated":"2017-12-15T04:26:26Z","snapshot_observed_at":"2026-07-06T06:14:30.795326Z","submitted_at":"2017-12-15T04:26:26Z","title":"Targeted Backdoor Attacks on Deep Learning Systems Using Data Poisoning","version":1},"cited_work":{"arxiv_id":"1712.05526","doi":"10.48550/arxiv.1712.05526","metadata_source":"pith","pith_arxiv_id":"1712.05526","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Targeted Backdoor Attacks on Deep Learning Systems Using Data Poisoning","venue":"cs.CR","work_id":"bb1fb326-f0f6-4c72-a4d2-eb7f0707b971","year":2017},"citing_paper":{"arxiv_id":"2603.29328","last_updated":"2026-04-07T04:38:05Z","snapshot_observed_at":"2026-08-03T15:47:55.167323Z","submitted_at":"2026-03-31T06:48:25Z","title":"Beyond Corner Patches: Semantics-Aware Backdoor Attack in Federated Learning","version":3},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-05-14T00:24:22.292451Z"},"links":{"cited_paper":"/paper/1712.05526","citing_paper":"/paper/2603.29328"},"observation_digest":"sha256:0fe27513a63b35cce33942eef0d0b540d0dd26d9fc3521a02708e710553356a2","observation_id":"d36fc115-86fc-4216-b2aa-d37ceb9ee808","resolution":{"observed_at":"2026-05-14T00:38:55.062440Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Trojaning attack on neural networks","venue":null,"work_id":"68070aa6-03dc-4763-bc99-d79b0f2d3ba7","year":2018},"citing_paper":{"arxiv_id":"2603.29328","last_updated":"2026-04-07T04:38:05Z","snapshot_observed_at":"2026-08-03T15:47:55.167323Z","submitted_at":"2026-03-31T06:48:25Z","title":"Beyond Corner Patches: Semantics-Aware Backdoor Attack in Federated Learning","version":3},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-05-14T00:24:22.292451Z"},"links":{"citing_paper":"/paper/2603.29328"},"observation_digest":"sha256:2d7d08fb25adba1b73d2477da23679deb23c8de7f846fb6ebc713453d6ee6524","observation_id":"683a7912-a443-44cd-b088-12142551425c","resolution":{"observed_at":"2026-05-14T00:28:30.929136Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"DBA: Distributed backdoor attacks against federated learning","venue":null,"work_id":"a2dc5b10-d7a2-4dce-b342-a375617bde83","year":2020},"citing_paper":{"arxiv_id":"2603.29328","last_updated":"2026-04-07T04:38:05Z","snapshot_observed_at":"2026-08-03T15:47:55.167323Z","submitted_at":"2026-03-31T06:48:25Z","title":"Beyond Corner Patches: Semantics-Aware Backdoor Attack in Federated Learning","version":3},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-05-14T00:24:22.292451Z"},"links":{"citing_paper":"/paper/2603.29328"},"observation_digest":"sha256:68b23edaa744bdc865f496d262cbe736af625b511f64fb9b6929c80288b46c1c","observation_id":"a9768e4a-ea32-4277-aa2a-354c0fcda4f8","resolution":{"observed_at":"2026-05-14T00:28:30.874600Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Machine learning with adversaries: Byzantine-tolerant gradient descent","venue":null,"work_id":"1e8444ba-f399-4452-84a4-8284630667d5","year":2017},"citing_paper":{"arxiv_id":"2603.29328","last_updated":"2026-04-07T04:38:05Z","snapshot_observed_at":"2026-08-03T15:47:55.167323Z","submitted_at":"2026-03-31T06:48:25Z","title":"Beyond Corner Patches: Semantics-Aware Backdoor Attack in Federated Learning","version":3},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-05-14T00:24:22.292451Z"},"links":{"citing_paper":"/paper/2603.29328"},"observation_digest":"sha256:2e46657d3050bf2fcdead7d39318505bd7bbe7b4310f91d7c27f3f8eb775441d","observation_id":"f88f8bd4-ce56-4c76-9efa-bad66b655547","resolution":{"observed_at":"2026-05-14T00:28:30.851234Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Byzantine- robust distributed learning: Towards optimal statistical rates","venue":null,"work_id":"fb58c2d5-2562-46aa-b0c2-c0936a480fdb","year":2018},"citing_paper":{"arxiv_id":"2603.29328","last_updated":"2026-04-07T04:38:05Z","snapshot_observed_at":"2026-08-03T15:47:55.167323Z","submitted_at":"2026-03-31T06:48:25Z","title":"Beyond Corner Patches: Semantics-Aware Backdoor Attack in Federated Learning","version":3},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-05-14T00:24:22.292451Z"},"links":{"citing_paper":"/paper/2603.29328"},"observation_digest":"sha256:a6f63ade1df01216ef4bfec139ccd3c0d532abad352f90e89a0fcaa1fbef9151","observation_id":"6455a628-35d4-4114-871f-84816da11218","resolution":{"observed_at":"2026-05-14T00:28:30.878436Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Hidden trigger backdoor attacks","venue":null,"work_id":"69a27bd2-5c32-4749-ae44-411dbcb2ea9e","year":2020},"citing_paper":{"arxiv_id":"2603.29328","last_updated":"2026-04-07T04:38:05Z","snapshot_observed_at":"2026-08-03T15:47:55.167323Z","submitted_at":"2026-03-31T06:48:25Z","title":"Beyond Corner Patches: Semantics-Aware Backdoor Attack in Federated Learning","version":3},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-05-14T00:24:22.292451Z"},"links":{"citing_paper":"/paper/2603.29328"},"observation_digest":"sha256:5595254c96e85bfb4a78ac3d7af4a55db3637be841e2b7d3271e190714a2abe2","observation_id":"e7ccd6c7-06ed-47c8-9680-1ee7c543dfc7","resolution":{"observed_at":"2026-05-14T00:28:30.836335Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Back- door attacks against deep learning systems in the physical world","venue":null,"work_id":"2f32ebc6-b5d8-49a4-90e7-5ec6dc9a38d5","year":2021},"citing_paper":{"arxiv_id":"2603.29328","last_updated":"2026-04-07T04:38:05Z","snapshot_observed_at":"2026-08-03T15:47:55.167323Z","submitted_at":"2026-03-31T06:48:25Z","title":"Beyond Corner Patches: Semantics-Aware Backdoor Attack in Federated Learning","version":3},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-05-14T00:24:22.292451Z"},"links":{"citing_paper":"/paper/2603.29328"},"observation_digest":"sha256:3feb06d2c6c74aef1d90f229c949bec84953cfbffadd8e200589472e5682348e","observation_id":"73a6dc7f-1038-4e91-9437-11e535534d62","resolution":{"observed_at":"2026-05-14T00:28:30.825121Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"How to backdoor diffu- sion models?","venue":null,"work_id":"0eb12188-2b92-44dd-97df-e92efb14ec2e","year":2023},"citing_paper":{"arxiv_id":"2603.29328","last_updated":"2026-04-07T04:38:05Z","snapshot_observed_at":"2026-08-03T15:47:55.167323Z","submitted_at":"2026-03-31T06:48:25Z","title":"Beyond Corner Patches: Semantics-Aware Backdoor Attack in Federated Learning","version":3},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-05-14T00:24:22.292451Z"},"links":{"citing_paper":"/paper/2603.29328"},"observation_digest":"sha256:cb528f3cf750282d0a26947eba458b9803c6bd280b8f437f1b1255ed73031f6b","observation_id":"8a0e8f75-af7b-48fa-8268-47451f8f011c","resolution":{"observed_at":"2026-05-14T00:28:30.828636Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Just how toxic is data poisoning? a unified bench- mark for backdoor and data poisoning attacks","venue":null,"work_id":"1b322a3d-262e-4555-95d8-8ed3e814217c","year":2021},"citing_paper":{"arxiv_id":"2603.29328","last_updated":"2026-04-07T04:38:05Z","snapshot_observed_at":"2026-08-03T15:47:55.167323Z","submitted_at":"2026-03-31T06:48:25Z","title":"Beyond Corner Patches: Semantics-Aware Backdoor Attack in Federated Learning","version":3},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-05-14T00:24:22.292451Z"},"links":{"citing_paper":"/paper/2603.29328"},"observation_digest":"sha256:73f9cd5a3fc3ff02aaf31b56dcb4ad8ea45bb3f2a221413a8377e220148f1aaf","observation_id":"433190c1-956b-4574-bd7f-5e6029fe1322","resolution":{"observed_at":"2026-05-14T00:28:30.817652Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Backdoorbench: A comprehensive benchmark of back- door learning","venue":null,"work_id":"6cdadce6-2904-4786-ab46-59cc94177e73","year":2022},"citing_paper":{"arxiv_id":"2603.29328","last_updated":"2026-04-07T04:38:05Z","snapshot_observed_at":"2026-08-03T15:47:55.167323Z","submitted_at":"2026-03-31T06:48:25Z","title":"Beyond Corner Patches: Semantics-Aware Backdoor Attack in Federated Learning","version":3},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-05-14T00:24:22.292451Z"},"links":{"citing_paper":"/paper/2603.29328"},"observation_digest":"sha256:231b330a13ed7888cebe80f902f25056804d1f93f6f289188ed2a40a637c032d","observation_id":"f9d6480a-7f99-4bcf-b94d-b4bd1396c21e","resolution":{"observed_at":"2026-05-14T00:28:30.821530Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1912.02771","last_updated":"2019-12-06T23:16:45Z","snapshot_observed_at":"2026-08-04T11:47:47.518305Z","submitted_at":"2019-12-05T18:05:59Z","title":"Label-Consistent Backdoor Attacks","version":2},"cited_work":{"arxiv_id":"1912.02771","doi":null,"metadata_source":"pith","pith_arxiv_id":"1912.02771","snapshot_observed_at":"2026-07-11T02:37:46.303787Z","title":"Label-Consistent Backdoor Attacks, December 2019","venue":"stat.ML","work_id":"6b7221ce-154c-4e93-bdc4-fd4f65672799","year":2019},"citing_paper":{"arxiv_id":"2603.29328","last_updated":"2026-04-07T04:38:05Z","snapshot_observed_at":"2026-08-03T15:47:55.167323Z","submitted_at":"2026-03-31T06:48:25Z","title":"Beyond Corner Patches: Semantics-Aware Backdoor Attack in Federated Learning","version":3},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-05-14T00:24:22.292451Z"},"links":{"cited_paper":"/paper/1912.02771","citing_paper":"/paper/2603.29328"},"observation_digest":"sha256:a63203e3818d19da8a3d8c5bc4878b20ede23d7e11746f77ef97f68367c186ff","observation_id":"ee4264ed-e04b-4241-b40f-26e3399898ad","resolution":{"observed_at":"2026-05-14T00:28:30.127480Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Backdoor learning: A survey","venue":null,"work_id":"7e2ab31f-3574-4839-b058-2ed73be3530d","year":2022},"citing_paper":{"arxiv_id":"2603.29328","last_updated":"2026-04-07T04:38:05Z","snapshot_observed_at":"2026-08-03T15:47:55.167323Z","submitted_at":"2026-03-31T06:48:25Z","title":"Beyond Corner Patches: Semantics-Aware Backdoor Attack in Federated Learning","version":3},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-05-14T00:24:22.292451Z"},"links":{"citing_paper":"/paper/2603.29328"},"observation_digest":"sha256:0a4d1aeac7b94c0602d01c0dfdb45f2d9f45b6cf28b14957a0749f6cb899a745","observation_id":"110d5a18-c0a1-4813-b006-5f588f374e06","resolution":{"observed_at":"2026-05-14T00:28:30.839913Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Reflection backdoor: A natural backdoor attack on deep neural networks","venue":null,"work_id":"bf2de28a-ba2c-4a42-959c-c340bd939bb4","year":2020},"citing_paper":{"arxiv_id":"2603.29328","last_updated":"2026-04-07T04:38:05Z","snapshot_observed_at":"2026-08-03T15:47:55.167323Z","submitted_at":"2026-03-31T06:48:25Z","title":"Beyond Corner Patches: Semantics-Aware Backdoor Attack in Federated Learning","version":3},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-05-14T00:24:22.292451Z"},"links":{"citing_paper":"/paper/2603.29328"},"observation_digest":"sha256:4e931b0c2ca93f71044d5ceca724de54691fbc28f805d1c84a229dc9838647c6","observation_id":"aaa57585-477e-4ee7-a804-edb3dfc2e844","resolution":{"observed_at":"2026-05-14T00:28:30.813713Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Lira: Learnable, im- perceptible and robust backdoor attacks","venue":null,"work_id":"a18f9834-60f1-4aed-9751-805e1ab168fb","year":2021},"citing_paper":{"arxiv_id":"2603.29328","last_updated":"2026-04-07T04:38:05Z","snapshot_observed_at":"2026-08-03T15:47:55.167323Z","submitted_at":"2026-03-31T06:48:25Z","title":"Beyond Corner Patches: Semantics-Aware Backdoor Attack in Federated Learning","version":3},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-05-14T00:24:22.292451Z"},"links":{"citing_paper":"/paper/2603.29328"},"observation_digest":"sha256:a8c5a701159b1a3ac59d0edb1179ab55983f08cc0aaa74e3c057044a849c2715","observation_id":"68fcf10b-cefb-4679-9712-480c50a42cf8","resolution":{"observed_at":"2026-05-14T00:28:30.843531Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Invisible backdoor attacks on deep neural networks via steganography and poisoning","venue":null,"work_id":"6536115b-a408-4935-9330-ceb635fa64c5","year":2021},"citing_paper":{"arxiv_id":"2603.29328","last_updated":"2026-04-07T04:38:05Z","snapshot_observed_at":"2026-08-03T15:47:55.167323Z","submitted_at":"2026-03-31T06:48:25Z","title":"Beyond Corner Patches: Semantics-Aware Backdoor Attack in Federated Learning","version":3},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-05-14T00:24:22.292451Z"},"links":{"citing_paper":"/paper/2603.29328"},"observation_digest":"sha256:5d8c891353b4d756f58a6bee70165cda663e5afb8baebe9a986bcd58e9dfb9d2","observation_id":"0e15fe37-74ca-4b1a-bcfb-f3a33e6a8021","resolution":{"observed_at":"2026-05-14T00:28:30.832211Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1911.07963","last_updated":"2019-12-02T19:00:11Z","snapshot_observed_at":"2026-07-06T08:37:59.785967Z","submitted_at":"2019-11-18T21:25:03Z","title":"Can You Really Backdoor Federated Learning?","version":2},"cited_work":{"arxiv_id":"1911.07963","doi":null,"metadata_source":"pith","pith_arxiv_id":"1911.07963","snapshot_observed_at":"2026-07-11T00:47:43.820961Z","title":"Can you really backdoor federated learning?","venue":"cs.LG","work_id":"e3828d1f-038f-4371-a8d9-73a2916ee4b5","year":2019},"citing_paper":{"arxiv_id":"2603.29328","last_updated":"2026-04-07T04:38:05Z","snapshot_observed_at":"2026-08-03T15:47:55.167323Z","submitted_at":"2026-03-31T06:48:25Z","title":"Beyond Corner Patches: Semantics-Aware Backdoor Attack in Federated Learning","version":3},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-05-14T00:24:22.292451Z"},"links":{"cited_paper":"/paper/1911.07963","citing_paper":"/paper/2603.29328"},"observation_digest":"sha256:c77a0f2ed6c94815d2de76114d996c2582e1ab7ff383e8ea4a6f538b3452f576","observation_id":"56f4525e-cead-4cf7-902e-e5fac457a333","resolution":{"observed_at":"2026-05-14T00:28:30.102453Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2207.05286","last_updated":"2023-04-22T15:31:55Z","snapshot_observed_at":"2026-08-03T00:36:23.848594Z","submitted_at":"2022-07-12T03:42:05Z","title":"Know Your Space: Inlier and Outlier Construction for Calibrating Medical OOD Detectors","version":2},"cited_work":{"arxiv_id":"2207.05286","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2207.05286","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Backdoor attacks and defenses in federated learning: Survey, challenges and future research directions","venue":null,"work_id":"bab55352-70d4-4350-b678-c51fe1d7a3e0","year":2022},"citing_paper":{"arxiv_id":"2603.29328","last_updated":"2026-04-07T04:38:05Z","snapshot_observed_at":"2026-08-03T15:47:55.167323Z","submitted_at":"2026-03-31T06:48:25Z","title":"Beyond Corner Patches: Semantics-Aware Backdoor Attack in Federated Learning","version":3},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-05-14T00:24:22.292451Z"},"links":{"cited_paper":"/paper/2207.05286","citing_paper":"/paper/2603.29328"},"observation_digest":"sha256:114da1cc1c8bf27abf8d90cd5cb7b9c4c07180f7afb8ff9ab4000e26f59f6c3d","observation_id":"43f70365-b310-40fe-a532-d50ecb287027","resolution":{"observed_at":"2026-05-14T00:28:30.138133Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"The hidden vulnerability of distributed learning in byzantium","venue":null,"work_id":"121fa671-d956-401d-8b85-7efcdb284533","year":2018},"citing_paper":{"arxiv_id":"2603.29328","last_updated":"2026-04-07T04:38:05Z","snapshot_observed_at":"2026-08-03T15:47:55.167323Z","submitted_at":"2026-03-31T06:48:25Z","title":"Beyond Corner Patches: Semantics-Aware Backdoor Attack in Federated Learning","version":3},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-05-14T00:24:22.292451Z"},"links":{"citing_paper":"/paper/2603.29328"},"observation_digest":"sha256:6ace8cc63c149e88b78b8fcd8286a1ab5c127abbfc5bddffed180f177ff38f7a","observation_id":"426f5c5a-d4bc-447c-a4f3-978316fba770","resolution":{"observed_at":"2026-05-14T00:28:30.806073Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Flame: Taming backdoors in federated learning","venue":null,"work_id":"b0ea1f4f-0be5-4015-9203-a22af44df344","year":2022},"citing_paper":{"arxiv_id":"2603.29328","last_updated":"2026-04-07T04:38:05Z","snapshot_observed_at":"2026-08-03T15:47:55.167323Z","submitted_at":"2026-03-31T06:48:25Z","title":"Beyond Corner Patches: Semantics-Aware Backdoor Attack in Federated Learning","version":3},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-05-14T00:24:22.292451Z"},"links":{"citing_paper":"/paper/2603.29328"},"observation_digest":"sha256:efc9e3e1a8cbcc6846b2c449d26d10a8d1d5359b2b254a1e83922f9c47b2acf8","observation_id":"86f7f1d4-37f7-4995-92f2-1b8f151a849b","resolution":{"observed_at":"2026-05-14T00:28:30.802100Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Flair: Defense against model poisoning attack in federated learning","venue":null,"work_id":"c257e521-662c-4fb8-a2ae-06d8cc1a1733","year":2023},"citing_paper":{"arxiv_id":"2603.29328","last_updated":"2026-04-07T04:38:05Z","snapshot_observed_at":"2026-08-03T15:47:55.167323Z","submitted_at":"2026-03-31T06:48:25Z","title":"Beyond Corner Patches: Semantics-Aware Backdoor Attack in Federated Learning","version":3},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-05-14T00:24:22.292451Z"},"links":{"citing_paper":"/paper/2603.29328"},"observation_digest":"sha256:f9fb2a9e92c9cd42c6adaa4e6b2cec7609b0c659b7b7b72dabed440706c29833","observation_id":"01ee5491-584f-41fc-b28d-2d3276252fc5","resolution":{"observed_at":"2026-05-14T00:28:30.863160Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2012.13995","last_updated":"2022-04-12T01:56:47Z","snapshot_observed_at":"2026-07-06T10:28:06.533127Z","submitted_at":"2020-12-27T18:43:39Z","title":"FLTrust: Byzantine-robust Federated Learning via Trust Bootstrapping","version":3},"cited_work":{"arxiv_id":"2012.13995","doi":"10.48550/arxiv.2012.13995","metadata_source":"arxiv_reference","pith_arxiv_id":"2012.13995","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"arXiv preprint arXiv:2012.13995 , year=","venue":"arXiv (Cornell University)","work_id":"0364103d-9db6-4c1c-a200-06789828f79f","year":2012},"citing_paper":{"arxiv_id":"2603.29328","last_updated":"2026-04-07T04:38:05Z","snapshot_observed_at":"2026-08-03T15:47:55.167323Z","submitted_at":"2026-03-31T06:48:25Z","title":"Beyond Corner Patches: Semantics-Aware Backdoor Attack in Federated Learning","version":3},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-05-14T00:24:22.292451Z"},"links":{"cited_paper":"/paper/2012.13995","citing_paper":"/paper/2603.29328"},"observation_digest":"sha256:7724782549a2b1fd5a0aae493fdff66640bcee7d63b2f6a4768a725ff812fc6b","observation_id":"3efdbad0-4901-45f2-a955-2fd743209ac9","resolution":{"observed_at":"2026-05-14T00:28:30.108404Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Fedinv: Byzantine- robust federated learning by inversing local model updates","venue":null,"work_id":"13d833ec-b0e9-4640-b70a-c3a6a7bf2d0e","year":2022},"citing_paper":{"arxiv_id":"2603.29328","last_updated":"2026-04-07T04:38:05Z","snapshot_observed_at":"2026-08-03T15:47:55.167323Z","submitted_at":"2026-03-31T06:48:25Z","title":"Beyond Corner Patches: Semantics-Aware Backdoor Attack in Federated Learning","version":3},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-05-14T00:24:22.292451Z"},"links":{"citing_paper":"/paper/2603.29328"},"observation_digest":"sha256:8bdde9fb67e5d106a47874fe77cebe96b4691c25e7cc45c95a4a2452de64fe44","observation_id":"53a3821b-d806-415e-b469-6940298a1018","resolution":{"observed_at":"2026-05-14T00:28:30.867248Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Sear: Secure and efficient aggregation for byzantine-robust federated learning","venue":null,"work_id":"fcae5fb8-5080-4486-99bf-6f3673c4bc58","year":2021},"citing_paper":{"arxiv_id":"2603.29328","last_updated":"2026-04-07T04:38:05Z","snapshot_observed_at":"2026-08-03T15:47:55.167323Z","submitted_at":"2026-03-31T06:48:25Z","title":"Beyond Corner Patches: Semantics-Aware Backdoor Attack in Federated Learning","version":3},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-05-14T00:24:22.292451Z"},"links":{"citing_paper":"/paper/2603.29328"},"observation_digest":"sha256:b636f9728d86b6bb571f554b0c7cc68fed164690bb899a40c16df74ea2aaf0c1","observation_id":"1e230d13-6e28-44b3-8696-23a3f1ffff6b","resolution":{"observed_at":"2026-05-14T00:28:30.847709Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Byzantine-robust decentralized federated learning","venue":null,"work_id":"8b098d08-9162-4cd9-9c01-2fb8aa91282b","year":2024},"citing_paper":{"arxiv_id":"2603.29328","last_updated":"2026-04-07T04:38:05Z","snapshot_observed_at":"2026-08-03T15:47:55.167323Z","submitted_at":"2026-03-31T06:48:25Z","title":"Beyond Corner Patches: Semantics-Aware Backdoor Attack in Federated Learning","version":3},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-05-14T00:24:22.292451Z"},"links":{"citing_paper":"/paper/2603.29328"},"observation_digest":"sha256:54909b78afc3d0b5346ca98678eb8b107b67fcfb704cbce61eb09e90fae8456f","observation_id":"c152e7f4-b672-4ff4-9651-88f6b182ecc4","resolution":{"observed_at":"2026-05-14T00:28:30.797880Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Filterfl: Knowledge filtering-based data-free backdoor defense for federated learning","venue":null,"work_id":"2a42a8cf-0c9d-49f4-b15b-e0d53c52b051","year":2025},"citing_paper":{"arxiv_id":"2603.29328","last_updated":"2026-04-07T04:38:05Z","snapshot_observed_at":"2026-08-03T15:47:55.167323Z","submitted_at":"2026-03-31T06:48:25Z","title":"Beyond Corner Patches: Semantics-Aware Backdoor Attack in Federated Learning","version":3},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-05-14T00:24:22.292451Z"},"links":{"citing_paper":"/paper/2603.29328"},"observation_digest":"sha256:0df134a8e260f28b46885ca11f0be4ce340dc531d7d14e8d2d6459c536478926","observation_id":"6198d40c-c662-4d06-b7b9-397850fecd4a","resolution":{"observed_at":"2026-05-14T00:28:30.794016Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Guiding instruction-based image editing via multimodal large language models","venue":null,"work_id":"e79d4650-2bae-4a42-9ccc-8bab794e84b9","year":2024},"citing_paper":{"arxiv_id":"2603.29328","last_updated":"2026-04-07T04:38:05Z","snapshot_observed_at":"2026-08-03T15:47:55.167323Z","submitted_at":"2026-03-31T06:48:25Z","title":"Beyond Corner Patches: Semantics-Aware Backdoor Attack in Federated Learning","version":3},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-05-14T00:24:22.292451Z"},"links":{"citing_paper":"/paper/2603.29328"},"observation_digest":"sha256:06b3be1241b147e7c8fe08bbe97d6ad8c858a556a432a1b0191dfd433dc4e412","observation_id":"f2617ed1-995f-4ea2-98ea-59a1ec99b12e","resolution":{"observed_at":"2026-05-14T00:28:30.870943Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2509.13219","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"On the out-of-distribution backdoor attack for federated learning","venue":null,"work_id":"0c03c6d2-2364-4f30-a482-6d3fc7eb5da6","year":2025},"citing_paper":{"arxiv_id":"2603.29328","last_updated":"2026-04-07T04:38:05Z","snapshot_observed_at":"2026-08-03T15:47:55.167323Z","submitted_at":"2026-03-31T06:48:25Z","title":"Beyond Corner Patches: Semantics-Aware Backdoor Attack in Federated Learning","version":3},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-05-14T00:24:22.292451Z"},"links":{"citing_paper":"/paper/2603.29328"},"observation_digest":"sha256:97b18277c39aed1b9606eaf2f968dedec3bc5628d609242f04b9e8cb4becdd11","observation_id":"94d733f7-2d5f-4cf0-9d15-5dd6e13c691a","resolution":{"observed_at":"2026-05-14T00:28:30.090201Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"A physical backdoor attack against practical federated learning","venue":null,"work_id":"a00ad680-f298-4048-ad38-72636959901d","year":2025},"citing_paper":{"arxiv_id":"2603.29328","last_updated":"2026-04-07T04:38:05Z","snapshot_observed_at":"2026-08-03T15:47:55.167323Z","submitted_at":"2026-03-31T06:48:25Z","title":"Beyond Corner Patches: Semantics-Aware Backdoor Attack in Federated Learning","version":3},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-05-14T00:24:22.292451Z"},"links":{"citing_paper":"/paper/2603.29328"},"observation_digest":"sha256:390252325833736d49e5f674ca4a445e1c6b73f75ee8fa4bdf5e16e81fcf2bc1","observation_id":"c3627de6-714b-48dd-9c46-d726735ad760","resolution":{"observed_at":"2026-05-14T00:28:30.790205Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-10T12:17:04.525324Z","title":"Deep residual learning for image recognition","venue":null,"work_id":"e36aa800-b42c-4273-94d4-d1cbbbbbef81","year":2016},"citing_paper":{"arxiv_id":"2603.29328","last_updated":"2026-04-07T04:38:05Z","snapshot_observed_at":"2026-08-03T15:47:55.167323Z","submitted_at":"2026-03-31T06:48:25Z","title":"Beyond Corner Patches: Semantics-Aware Backdoor Attack in Federated Learning","version":3},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-05-14T00:24:22.292451Z"},"links":{"citing_paper":"/paper/2603.29328"},"observation_digest":"sha256:4ad08092a31d8142db28e386939928de78eca160851a6b64314e528cf709d7b2","observation_id":"847248ef-723d-4159-abde-9d6d19d98996","resolution":{"observed_at":"2026-05-14T00:28:30.882487Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1409.1556","last_updated":"2015-04-10T16:25:04Z","snapshot_observed_at":"2026-07-06T03:53:32.549552Z","submitted_at":"2014-09-04T19:48:04Z","title":"Very Deep Convolutional Networks for Large-Scale Image Recognition","version":6},"cited_work":{"arxiv_id":"1409.1556","doi":"10.48550/arxiv.1409.1556","metadata_source":"pith","pith_arxiv_id":"1409.1556","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Very Deep Convolutional Networks for Large-Scale Image Recognition","venue":"cs.CV","work_id":"1c4b4409-c14b-488b-a086-c57a5aab8a29","year":2014},"citing_paper":{"arxiv_id":"2603.29328","last_updated":"2026-04-07T04:38:05Z","snapshot_observed_at":"2026-08-03T15:47:55.167323Z","submitted_at":"2026-03-31T06:48:25Z","title":"Beyond Corner Patches: Semantics-Aware Backdoor Attack in Federated Learning","version":3},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-05-14T00:24:22.292451Z"},"links":{"cited_paper":"/paper/1409.1556","citing_paper":"/paper/2603.29328"},"observation_digest":"sha256:2547283208090374e71520bca1a88ca92a77e0815e9588d04912824a94349451","observation_id":"ea61691e-c6e8-45fc-b606-1492c185665c","resolution":{"observed_at":"2026-05-14T00:28:30.132480Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-07-12T23:51:07.915518+00:00","source":"crossref_status_cache"},{"observed_at":"2026-07-12T23:51:07.915518+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Deep learning face attributes in the wild","venue":null,"work_id":"3a851295-4e24-46d9-9568-6ed32c462108","year":2015},"citing_paper":{"arxiv_id":"2603.29328","last_updated":"2026-04-07T04:38:05Z","snapshot_observed_at":"2026-08-03T15:47:55.167323Z","submitted_at":"2026-03-31T06:48:25Z","title":"Beyond Corner Patches: Semantics-Aware Backdoor Attack in Federated Learning","version":3},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-05-14T00:24:22.292451Z"},"links":{"citing_paper":"/paper/2603.29328"},"observation_digest":"sha256:b7e47459f88a5c60bf1e42f11cbdb1d1ed5c83f17dbda0527d35b124d2a34151","observation_id":"13fcee32-7ebe-4438-b6be-a8c03ec1a60e","resolution":{"observed_at":"2026-05-14T00:28:30.809926Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Man vs. computer: Benchmarking machine learning algorithms for traffic sign recognition","venue":null,"work_id":"0b4cb227-e88b-441b-93f6-47a48e61f021","year":2012},"citing_paper":{"arxiv_id":"2603.29328","last_updated":"2026-04-07T04:38:05Z","snapshot_observed_at":"2026-08-03T15:47:55.167323Z","submitted_at":"2026-03-31T06:48:25Z","title":"Beyond Corner Patches: Semantics-Aware Backdoor Attack in Federated Learning","version":3},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-05-14T00:24:22.292451Z"},"links":{"citing_paper":"/paper/2603.29328"},"observation_digest":"sha256:9e49698684b65892a405cfa05600bd51fd2e53d55975bc8a7ef9211932f6e3ba","observation_id":"cb1ccd3e-011a-4e17-9873-4d0f1e5346aa","resolution":{"observed_at":"2026-05-14T00:28:30.785752Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1802.03426","last_updated":"2020-09-18T01:56:41Z","snapshot_observed_at":"2026-08-02T15:32:07.466568Z","submitted_at":"2018-02-09T19:39:33Z","title":"UMAP: Uniform Manifold Approximation and Projection for Dimension Reduction","version":3},"cited_work":{"arxiv_id":"1802.03426","doi":"10.1037/adb0001138","metadata_source":"pith","pith_arxiv_id":"1802.03426","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"UMAP: Uniform Manifold Approximation and Projection for Dimension Reduction","venue":"stat.ML","work_id":"54c15172-6304-4008-a3b6-c4cc0803c054","year":2018},"citing_paper":{"arxiv_id":"2603.29328","last_updated":"2026-04-07T04:38:05Z","snapshot_observed_at":"2026-08-03T15:47:55.167323Z","submitted_at":"2026-03-31T06:48:25Z","title":"Beyond Corner Patches: Semantics-Aware Backdoor Attack in Federated Learning","version":3},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-05-14T00:24:22.292451Z"},"links":{"cited_paper":"/paper/1802.03426","citing_paper":"/paper/2603.29328"},"observation_digest":"sha256:d5679c32630d4b63f3e3d1673526223217fd73e52512db3a32cc9197a02695ba","observation_id":"3a919862-062a-4b48-aa91-1c7e02282044","resolution":{"observed_at":"2026-05-14T00:28:30.096008Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-05-25T15:24:07.856203+00:00","source":"crossref_status_cache"},{"observed_at":"2026-05-25T15:24:07.856203+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2603.29328","last_updated":"2026-04-07T04:38:05Z","latest_version":3,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-03T15:47:55.167323Z","submitted_at":"2026-03-31T06:48:25Z","title":"Beyond Corner Patches: Semantics-Aware Backdoor Attack in Federated Learning"},"reference_resolution":{"displayed":47,"state_counts":{"malformed_identifier":0,"metadata_mismatch":1,"parse_uncertain":0,"unresolved":0,"verified_exact":8,"verified_fuzzy":38},"total_outbound_references":47},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"thesis":"As of 6 August 2026, this Paper Citation Record lists 47 of 47 outbound references and 1 inbound Pith citation observation for arXiv:2603.29328."}