{"as_of":"2026-08-10T03:44:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:9e19e2a91bcc57e64f2602d745b2e3c30c485ff27d699b77ba4d74b9a6984f08","coverage":[{"denominator":59,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":59,"source":"paper_references, paper_reference_links","source_observed_at":"2026-06-26T07:54:58.047670Z","state":"measured"},{"denominator":59,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":59,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-09T06:31:02.800959+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2606.23362/citation-record","integrity":"/paper/2606.23362/integrity","json":"/paper/2606.23362/citation-record.json","paper":"/paper/2606.23362"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T07:54:58.047670Z","title":"In: Proceedings of the AAAI Conference on Artificial Intelligence","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2606.23362","last_updated":"2026-06-22T14:00:06Z","snapshot_observed_at":"2026-08-02T22:23:28.390450Z","submitted_at":"2026-06-22T14:00:06Z","title":"TooBad: Backdoor Diffusion Models with Ultra-Low Poison Rate and Imperceptible Trigger","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-06-26T07:54:58.047670Z"},"links":{"citing_paper":"/paper/2606.23362"},"observation_digest":"sha256:a18256b6e4b533ac07ea77906375ba72cf188dacbb8e47b180f5e30a6888a1c9","observation_id":"b3db02c0-0f05-4b29-a53f-b20d88a8c26d","resolution":{"observed_at":"2026-06-26T07:54:58.047670Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T07:54:58.047670Z","title":"In: Advances in Neural Information Processing Systems","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2606.23362","last_updated":"2026-06-22T14:00:06Z","snapshot_observed_at":"2026-08-02T22:23:28.390450Z","submitted_at":"2026-06-22T14:00:06Z","title":"TooBad: Backdoor Diffusion Models with Ultra-Low Poison Rate and Imperceptible Trigger","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-06-26T07:54:58.047670Z"},"links":{"citing_paper":"/paper/2606.23362"},"observation_digest":"sha256:393ea7965ce29648d7af7aec0b7e5269f953134b934fff8430b2b1f6db030df1","observation_id":"457fc891-5b0c-4dc2-9dc3-63e0c9fbb143","resolution":{"observed_at":"2026-06-26T07:54:58.047670Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2024.336147","doi":"10.1109/tkde.2024.3361474","metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"IEEE Transactions on Knowledge and Data Engineering pp","venue":"IEEE Transactions on Knowledge and Data Engineering","work_id":"c1ed3cdf-a88b-45f2-88f4-f7cb304c7bf4","year":2024},"citing_paper":{"arxiv_id":"2606.23362","last_updated":"2026-06-22T14:00:06Z","snapshot_observed_at":"2026-08-02T22:23:28.390450Z","submitted_at":"2026-06-22T14:00:06Z","title":"TooBad: Backdoor Diffusion Models with Ultra-Low Poison Rate and Imperceptible Trigger","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-06-26T07:54:58.047670Z"},"links":{"citing_paper":"/paper/2606.23362"},"observation_digest":"sha256:66d3648840b9f207b7605b3aa66e6f0083c458e73f860c7c4781f04dff7eb046","observation_id":"2842b505-1f2b-4db7-89e8-c739e6924f67","resolution":{"observed_at":"2026-06-26T07:59:08.113077Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-07-14T23:50:02.614413+00:00","source":"crossref_status_cache"},{"observed_at":"2026-07-14T23:50:02.614413+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T07:54:58.047670Z","title":"In: Proceedings of the International Conference on Learning Representations (2020)","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2606.23362","last_updated":"2026-06-22T14:00:06Z","snapshot_observed_at":"2026-08-02T22:23:28.390450Z","submitted_at":"2026-06-22T14:00:06Z","title":"TooBad: Backdoor Diffusion Models with Ultra-Low Poison Rate and Imperceptible Trigger","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-06-26T07:54:58.047670Z"},"links":{"citing_paper":"/paper/2606.23362"},"observation_digest":"sha256:25d11d05f3880c10bfb52a9c18bae1285af759624b5ba759e2cf0d11078272e6","observation_id":"a0ccf707-ce9a-4e52-b684-52264f3c1b08","resolution":{"observed_at":"2026-06-26T07:54:58.047670Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T07:54:58.047670Z","title":"In: CVPR","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2606.23362","last_updated":"2026-06-22T14:00:06Z","snapshot_observed_at":"2026-08-02T22:23:28.390450Z","submitted_at":"2026-06-22T14:00:06Z","title":"TooBad: Backdoor Diffusion Models with Ultra-Low Poison Rate and Imperceptible Trigger","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-06-26T07:54:58.047670Z"},"links":{"citing_paper":"/paper/2606.23362"},"observation_digest":"sha256:1fefe701601c4cf702deb4a00817fa3e5eae3af896972223843f19f65d189c5f","observation_id":"2108d2c2-9b94-429e-a96d-73f80e7d6533","resolution":{"observed_at":"2026-06-26T07:54:58.047670Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1712.05526","last_updated":"2017-12-15T04:26:26Z","snapshot_observed_at":"2026-07-06T06:14:30.795326Z","submitted_at":"2017-12-15T04:26:26Z","title":"Targeted Backdoor Attacks on Deep Learning Systems Using Data Poisoning","version":1},"cited_work":{"arxiv_id":"1712.05526","doi":"10.48550/arxiv.1712.05526","metadata_source":"pith","pith_arxiv_id":"1712.05526","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Targeted Backdoor Attacks on Deep Learning Systems Using Data Poisoning","venue":"cs.CR","work_id":"bb1fb326-f0f6-4c72-a4d2-eb7f0707b971","year":2017},"citing_paper":{"arxiv_id":"2606.23362","last_updated":"2026-06-22T14:00:06Z","snapshot_observed_at":"2026-08-02T22:23:28.390450Z","submitted_at":"2026-06-22T14:00:06Z","title":"TooBad: Backdoor Diffusion Models with Ultra-Low Poison Rate and Imperceptible Trigger","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-06-26T07:54:58.047670Z"},"links":{"cited_paper":"/paper/1712.05526","citing_paper":"/paper/2606.23362"},"observation_digest":"sha256:68cace3c8f29562228366010ea825f498954ef990f6b3c3f32aace869950940c","observation_id":"e1c6c09b-6c1c-4c55-8fc5-a66c919bc1df","resolution":{"observed_at":"2026-07-04T11:39:46.318898Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T07:54:58.047670Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2606.23362","last_updated":"2026-06-22T14:00:06Z","snapshot_observed_at":"2026-08-02T22:23:28.390450Z","submitted_at":"2026-06-22T14:00:06Z","title":"TooBad: Backdoor Diffusion Models with Ultra-Low Poison Rate and Imperceptible Trigger","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-06-26T07:54:58.047670Z"},"links":{"citing_paper":"/paper/2606.23362"},"observation_digest":"sha256:4708a184d0b4699b930e3569953caa91b991009fd4ab7232869cf36952c25339","observation_id":"3315cb04-a451-4437-9ba1-df2b9dcc3717","resolution":{"observed_at":"2026-06-26T07:54:58.047670Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T07:54:58.047670Z","title":"In: NeuRIPS","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2606.23362","last_updated":"2026-06-22T14:00:06Z","snapshot_observed_at":"2026-08-02T22:23:28.390450Z","submitted_at":"2026-06-22T14:00:06Z","title":"TooBad: Backdoor Diffusion Models with Ultra-Low Poison Rate and Imperceptible Trigger","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-06-26T07:54:58.047670Z"},"links":{"citing_paper":"/paper/2606.23362"},"observation_digest":"sha256:776c821bb3de7163d0a93700123ee6b51772d051f98a34614a318726badf8671","observation_id":"cc23f2b2-83c9-49d2-aa11-56dd0fbef38a","resolution":{"observed_at":"2026-06-26T07:54:58.047670Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2023.326198","doi":"10.1109/tpami.2023.3261988","metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Diffusion Models in Vision: A Survey","venue":"IEEE Transactions on Pattern Analysis and Machine Intelligence","work_id":"67f48a56-a9ae-4f81-8e7b-7156500486a0","year":2023},"citing_paper":{"arxiv_id":"2606.23362","last_updated":"2026-06-22T14:00:06Z","snapshot_observed_at":"2026-08-02T22:23:28.390450Z","submitted_at":"2026-06-22T14:00:06Z","title":"TooBad: Backdoor Diffusion Models with Ultra-Low Poison Rate and Imperceptible Trigger","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-06-26T07:54:58.047670Z"},"links":{"citing_paper":"/paper/2606.23362"},"observation_digest":"sha256:641e56752819173d895cf941521f003357b7671e75b26ae013c282829c609e5a","observation_id":"e10f741e-5677-419d-b4c6-23a1a4087cd7","resolution":{"observed_at":"2026-06-26T07:59:08.107761Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2024.341193","doi":"10.1109/tifs.2024.3411936","metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"IEEE Transactions on Information Forensics and Security19, 6364–6376 (2024).https://doi.org/10.1109/TIFS.2024.3411936","venue":"IEEE Transactions on Information Forensics and Security","work_id":"b059ba60-3c71-4088-8790-fda474689112","year":2024},"citing_paper":{"arxiv_id":"2606.23362","last_updated":"2026-06-22T14:00:06Z","snapshot_observed_at":"2026-08-02T22:23:28.390450Z","submitted_at":"2026-06-22T14:00:06Z","title":"TooBad: Backdoor Diffusion Models with Ultra-Low Poison Rate and Imperceptible Trigger","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-06-26T07:54:58.047670Z"},"links":{"citing_paper":"/paper/2606.23362"},"observation_digest":"sha256:3ff25213687059fc9adffab628186df09a84da22ca4701569e222075a3b4ab8e","observation_id":"94fe36d1-0804-40b9-9ec6-ae74ac570a6e","resolution":{"observed_at":"2026-06-26T07:59:08.113906Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T07:54:58.047670Z","title":"In: Advances in Neural Information Processing Systems","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2606.23362","last_updated":"2026-06-22T14:00:06Z","snapshot_observed_at":"2026-08-02T22:23:28.390450Z","submitted_at":"2026-06-22T14:00:06Z","title":"TooBad: Backdoor Diffusion Models with Ultra-Low Poison Rate and Imperceptible Trigger","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-06-26T07:54:58.047670Z"},"links":{"citing_paper":"/paper/2606.23362"},"observation_digest":"sha256:f2c014de7a6e5ed3499285ea016ff3f576d8b6ef8ad766514ef83370f290d25b","observation_id":"d4f4839f-36c6-4803-acc8-33755474f07c","resolution":{"observed_at":"2026-06-26T07:54:58.047670Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-07-06T05:56:16.413472Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"cited_work":{"arxiv_id":"1708.06733","doi":null,"metadata_source":"pith","pith_arxiv_id":"1708.06733","snapshot_observed_at":"2026-07-11T00:47:43.661742Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","venue":"cs.CR","work_id":"7b1cd3ac-9abd-4579-8d13-c75d30c83a5f","year":2017},"citing_paper":{"arxiv_id":"2606.23362","last_updated":"2026-06-22T14:00:06Z","snapshot_observed_at":"2026-08-02T22:23:28.390450Z","submitted_at":"2026-06-22T14:00:06Z","title":"TooBad: Backdoor Diffusion Models with Ultra-Low Poison Rate and Imperceptible Trigger","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-06-26T07:54:58.047670Z"},"links":{"cited_paper":"/paper/1708.06733","citing_paper":"/paper/2606.23362"},"observation_digest":"sha256:83db811fae1831c705a10bda7c880e0495ca15658654cb6cd65f1dda45204c75","observation_id":"43ab6fcc-8bad-4eb5-938e-844f1eb9d7ec","resolution":{"observed_at":"2026-07-04T11:39:46.302532Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T07:54:58.047670Z","title":"In: CVPR","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.23362","last_updated":"2026-06-22T14:00:06Z","snapshot_observed_at":"2026-08-02T22:23:28.390450Z","submitted_at":"2026-06-22T14:00:06Z","title":"TooBad: Backdoor Diffusion Models with Ultra-Low Poison Rate and Imperceptible Trigger","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-06-26T07:54:58.047670Z"},"links":{"citing_paper":"/paper/2606.23362"},"observation_digest":"sha256:696e36bb14d6f082052617926b3f10dbdb02fbe05e1859015919ed446e86c301","observation_id":"1d102e58-c40f-401a-bbde-6c64d2dc932f","resolution":{"observed_at":"2026-06-26T07:54:58.047670Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T07:54:58.047670Z","title":"In: Proceedings of the IEEE/CVF Conference on Computer Vision and Pattern Recognition","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2606.23362","last_updated":"2026-06-22T14:00:06Z","snapshot_observed_at":"2026-08-02T22:23:28.390450Z","submitted_at":"2026-06-22T14:00:06Z","title":"TooBad: Backdoor Diffusion Models with Ultra-Low Poison Rate and Imperceptible Trigger","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-06-26T07:54:58.047670Z"},"links":{"citing_paper":"/paper/2606.23362"},"observation_digest":"sha256:2dd0648086fd543312678f7a869e401b02f1568869a9331b87e47cb8abce8bf2","observation_id":"9e1f5ab8-7871-4368-837e-d4284c5293a9","resolution":{"observed_at":"2026-06-26T07:54:58.047670Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T07:54:58.047670Z","title":"Advances in Neural Information Processing Systems30(2017)","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2606.23362","last_updated":"2026-06-22T14:00:06Z","snapshot_observed_at":"2026-08-02T22:23:28.390450Z","submitted_at":"2026-06-22T14:00:06Z","title":"TooBad: Backdoor Diffusion Models with Ultra-Low Poison Rate and Imperceptible Trigger","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-06-26T07:54:58.047670Z"},"links":{"citing_paper":"/paper/2606.23362"},"observation_digest":"sha256:61df954f0b4059ecb09f0a7112437cda6dc147508d8af65f48a4252e2cc78a45","observation_id":"c3b68cbf-c1a8-46c3-a0b3-897dc8261a52","resolution":{"observed_at":"2026-06-26T07:54:58.047670Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T07:54:58.047670Z","title":"In: Advances in Neural Information Processing Systems","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2606.23362","last_updated":"2026-06-22T14:00:06Z","snapshot_observed_at":"2026-08-02T22:23:28.390450Z","submitted_at":"2026-06-22T14:00:06Z","title":"TooBad: Backdoor Diffusion Models with Ultra-Low Poison Rate and Imperceptible Trigger","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-06-26T07:54:58.047670Z"},"links":{"citing_paper":"/paper/2606.23362"},"observation_digest":"sha256:a45941e99d85b0da326bf539293e16ed38558d3973a6f9b9d89083daa382f89a","observation_id":"88d9ff48-fc38-4ad9-9bb5-c0c0290365bd","resolution":{"observed_at":"2026-06-26T07:54:58.047670Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T07:54:58.047670Z","title":"In: Advances in Neural Information Processing Systems","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2606.23362","last_updated":"2026-06-22T14:00:06Z","snapshot_observed_at":"2026-08-02T22:23:28.390450Z","submitted_at":"2026-06-22T14:00:06Z","title":"TooBad: Backdoor Diffusion Models with Ultra-Low Poison Rate and Imperceptible Trigger","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-06-26T07:54:58.047670Z"},"links":{"citing_paper":"/paper/2606.23362"},"observation_digest":"sha256:3f5084eb3db854c252fd593082a84e85dc3e69e109539fe4495fa0bf5a80eeed","observation_id":"b705cbc3-1833-4b08-82b8-83cdfce07001","resolution":{"observed_at":"2026-06-26T07:54:58.047670Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T07:54:58.047670Z","title":"In: Proceedings of the IEEE/CVF conference on computer vision and pattern recognition","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2606.23362","last_updated":"2026-06-22T14:00:06Z","snapshot_observed_at":"2026-08-02T22:23:28.390450Z","submitted_at":"2026-06-22T14:00:06Z","title":"TooBad: Backdoor Diffusion Models with Ultra-Low Poison Rate and Imperceptible Trigger","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-06-26T07:54:58.047670Z"},"links":{"citing_paper":"/paper/2606.23362"},"observation_digest":"sha256:44b688aad1e5a1e317930492eaabc2e7eb19a30e82f4ce02d4a9d1840ce0f914","observation_id":"7fe443f6-f047-42ac-ab40-361f8ec5ce94","resolution":{"observed_at":"2026-06-26T07:54:58.047670Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T07:54:58.047670Z","title":"In: Proceedings of the IEEE/CVF International Conference on Computer Vision","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2606.23362","last_updated":"2026-06-22T14:00:06Z","snapshot_observed_at":"2026-08-02T22:23:28.390450Z","submitted_at":"2026-06-22T14:00:06Z","title":"TooBad: Backdoor Diffusion Models with Ultra-Low Poison Rate and Imperceptible Trigger","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-06-26T07:54:58.047670Z"},"links":{"citing_paper":"/paper/2606.23362"},"observation_digest":"sha256:ac550ca34166da355cf270a5a5682675ce4d2dd86010bb8caf869edc5f103032","observation_id":"024ee721-f892-48ee-b41f-6f6bff299b24","resolution":{"observed_at":"2026-06-26T07:54:58.047670Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T07:54:58.047670Z","title":"In: Proceedings of the International Conference on Machine Learning (2014)","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2606.23362","last_updated":"2026-06-22T14:00:06Z","snapshot_observed_at":"2026-08-02T22:23:28.390450Z","submitted_at":"2026-06-22T14:00:06Z","title":"TooBad: Backdoor Diffusion Models with Ultra-Low Poison Rate and Imperceptible Trigger","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-06-26T07:54:58.047670Z"},"links":{"citing_paper":"/paper/2606.23362"},"observation_digest":"sha256:6990b71fd9c252f346d86a7775323ff581633a44fcc91ece33c6386a892c3501","observation_id":"3da61b15-3f3c-4fc3-a97c-34a12f58abbf","resolution":{"observed_at":"2026-06-26T07:54:58.047670Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T07:54:58.047670Z","title":null,"venue":null,"work_id":null,"year":2009},"citing_paper":{"arxiv_id":"2606.23362","last_updated":"2026-06-22T14:00:06Z","snapshot_observed_at":"2026-08-02T22:23:28.390450Z","submitted_at":"2026-06-22T14:00:06Z","title":"TooBad: Backdoor Diffusion Models with Ultra-Low Poison Rate and Imperceptible Trigger","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-06-26T07:54:58.047670Z"},"links":{"citing_paper":"/paper/2606.23362"},"observation_digest":"sha256:9408e9798273b5dab716b4948df805ef17850f0ead9738b21d6cd6cb70a916ed","observation_id":"d4086695-2ee7-4205-98dd-f1b707be1bad","resolution":{"observed_at":"2026-06-26T07:54:58.047670Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.00816","last_updated":"2024-06-02T17:43:19Z","snapshot_observed_at":"2026-08-06T18:38:32.896852Z","submitted_at":"2024-06-02T17:43:19Z","title":"Invisible Backdoor Attacks on Diffusion Models","version":1},"cited_work":{"arxiv_id":"2406.00816","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2406.00816","snapshot_observed_at":"2026-07-04T11:39:46.313714Z","title":"Invisible Backdoor Attacks on Diffusion Models","venue":null,"work_id":"d6b156c1-d4d6-4bbb-be4e-37cbbd7acb5f","year":2024},"citing_paper":{"arxiv_id":"2606.23362","last_updated":"2026-06-22T14:00:06Z","snapshot_observed_at":"2026-08-02T22:23:28.390450Z","submitted_at":"2026-06-22T14:00:06Z","title":"TooBad: Backdoor Diffusion Models with Ultra-Low Poison Rate and Imperceptible Trigger","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-06-26T07:54:58.047670Z"},"links":{"cited_paper":"/paper/2406.00816","citing_paper":"/paper/2606.23362"},"observation_digest":"sha256:7fc65e599cf194afd255d65a6ffaf4b0cff4cfdc3ab995487fd7bdecfdd82ead","observation_id":"3b0b6313-ca22-40ab-b4c4-b3401b5a5ad5","resolution":{"observed_at":"2026-07-04T11:39:46.315581Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T07:54:58.047670Z","title":"In: Advances in Neural Information Processing Systems","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2606.23362","last_updated":"2026-06-22T14:00:06Z","snapshot_observed_at":"2026-08-02T22:23:28.390450Z","submitted_at":"2026-06-22T14:00:06Z","title":"TooBad: Backdoor Diffusion Models with Ultra-Low Poison Rate and Imperceptible Trigger","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-06-26T07:54:58.047670Z"},"links":{"citing_paper":"/paper/2606.23362"},"observation_digest":"sha256:5452ada1df8b51913ba8c7d7c579803a04d2d6f0078aa7f95ed94ca09a591966","observation_id":"586429a3-0acb-4448-9feb-30f4174bdde6","resolution":{"observed_at":"2026-06-26T07:54:58.047670Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T07:54:58.047670Z","title":"Proceedings of the Interna- tional Journal of Computer Vision pp","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.23362","last_updated":"2026-06-22T14:00:06Z","snapshot_observed_at":"2026-08-02T22:23:28.390450Z","submitted_at":"2026-06-22T14:00:06Z","title":"TooBad: Backdoor Diffusion Models with Ultra-Low Poison Rate and Imperceptible Trigger","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-06-26T07:54:58.047670Z"},"links":{"citing_paper":"/paper/2606.23362"},"observation_digest":"sha256:13cf4138c61a62f02c044f1a41bd283b800df38ebd07d34534e2e83eb94a00c9","observation_id":"fec842fd-675e-4ce8-b612-dfac798c8fef","resolution":{"observed_at":"2026-06-26T07:54:58.047670Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T07:54:58.047670Z","title":"In: Proceedings of the IEEE/CVF Conference on Computer Vision and Pattern Recognition","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2606.23362","last_updated":"2026-06-22T14:00:06Z","snapshot_observed_at":"2026-08-02T22:23:28.390450Z","submitted_at":"2026-06-22T14:00:06Z","title":"TooBad: Backdoor Diffusion Models with Ultra-Low Poison Rate and Imperceptible Trigger","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-06-26T07:54:58.047670Z"},"links":{"citing_paper":"/paper/2606.23362"},"observation_digest":"sha256:6dcf3f48389beb3b72e84f480befdf9b2f50989e38b504fe12269bc9e3789b9a","observation_id":"c8bfbb8c-e51c-43cf-8744-bef9bdb758ed","resolution":{"observed_at":"2026-06-26T07:54:58.047670Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T07:54:58.047670Z","title":"In: Proceedings of the IEEE/CVF International Conference on Computer Vision","venue":null,"work_id":null,"year":2015},"citing_paper":{"arxiv_id":"2606.23362","last_updated":"2026-06-22T14:00:06Z","snapshot_observed_at":"2026-08-02T22:23:28.390450Z","submitted_at":"2026-06-22T14:00:06Z","title":"TooBad: Backdoor Diffusion Models with Ultra-Low Poison Rate and Imperceptible Trigger","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-06-26T07:54:58.047670Z"},"links":{"citing_paper":"/paper/2606.23362"},"observation_digest":"sha256:8e67bd04965d6ba3217596681fcaca8109e3ac985708148ad59aba611a22e657","observation_id":"a51782b9-352d-4228-874c-e0dcf15752ff","resolution":{"observed_at":"2026-06-26T07:54:58.047670Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T07:54:58.047670Z","title":"In: Advances in Neural Information Processing Systems","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2606.23362","last_updated":"2026-06-22T14:00:06Z","snapshot_observed_at":"2026-08-02T22:23:28.390450Z","submitted_at":"2026-06-22T14:00:06Z","title":"TooBad: Backdoor Diffusion Models with Ultra-Low Poison Rate and Imperceptible Trigger","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-06-26T07:54:58.047670Z"},"links":{"citing_paper":"/paper/2606.23362"},"observation_digest":"sha256:e4e67fa7479e30d5b85c1891624a7fced30d365bbd907aa6a902871d7a5cf099","observation_id":"d999a215-8508-477e-a536-620f1c062ede","resolution":{"observed_at":"2026-06-26T07:54:58.047670Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1706.06083","last_updated":"2019-09-04T18:53:10Z","snapshot_observed_at":"2026-08-07T14:27:46.872660Z","submitted_at":"2017-06-19T17:53:11Z","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","version":4},"cited_work":{"arxiv_id":"1706.06083","doi":"10.48550/arxiv.1706.06083","metadata_source":"pith","pith_arxiv_id":"1706.06083","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","venue":"stat.ML","work_id":"b20a57fa-4b7d-40ec-8b6a-ce48234630de","year":2017},"citing_paper":{"arxiv_id":"2606.23362","last_updated":"2026-06-22T14:00:06Z","snapshot_observed_at":"2026-08-02T22:23:28.390450Z","submitted_at":"2026-06-22T14:00:06Z","title":"TooBad: Backdoor Diffusion Models with Ultra-Low Poison Rate and Imperceptible Trigger","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-06-26T07:54:58.047670Z"},"links":{"cited_paper":"/paper/1706.06083","citing_paper":"/paper/2606.23362"},"observation_digest":"sha256:cf4f5df164a95421e40641fc09186e54315474fde43273fdfebf48b6e14399b1","observation_id":"f1533c40-33ef-4f27-ba41-3a0d70acf509","resolution":{"observed_at":"2026-07-04T11:39:46.321933Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2409.05294","last_updated":"2024-09-09T03:02:16Z","snapshot_observed_at":"2026-08-03T13:30:51.936695Z","submitted_at":"2024-09-09T03:02:16Z","title":"TERD: A Unified Framework for Safeguarding Diffusion Models Against Backdoors","version":1},"cited_work":{"arxiv_id":"2409.05294","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2409.05294","snapshot_observed_at":"2026-07-04T11:39:46.309889Z","title":"Terd: A unified framework for safeguarding diffu- sion models against backdoors","venue":null,"work_id":"0fbca04c-ea28-4ffb-a726-63885d278bf0","year":2024},"citing_paper":{"arxiv_id":"2606.23362","last_updated":"2026-06-22T14:00:06Z","snapshot_observed_at":"2026-08-02T22:23:28.390450Z","submitted_at":"2026-06-22T14:00:06Z","title":"TooBad: Backdoor Diffusion Models with Ultra-Low Poison Rate and Imperceptible Trigger","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-06-26T07:54:58.047670Z"},"links":{"cited_paper":"/paper/2409.05294","citing_paper":"/paper/2606.23362"},"observation_digest":"sha256:2853d61f40aa9f7e1a7c45a29654b8548de94ac7244b11e2d6a5c2aed886255f","observation_id":"0f8edc98-c7aa-4f6b-b586-28ce761f2efb","resolution":{"observed_at":"2026-07-04T11:39:46.311966Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T07:54:58.047670Z","title":"In: Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2606.23362","last_updated":"2026-06-22T14:00:06Z","snapshot_observed_at":"2026-08-02T22:23:28.390450Z","submitted_at":"2026-06-22T14:00:06Z","title":"TooBad: Backdoor Diffusion Models with Ultra-Low Poison Rate and Imperceptible Trigger","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-06-26T07:54:58.047670Z"},"links":{"citing_paper":"/paper/2606.23362"},"observation_digest":"sha256:0f64fd3e8c6b5fd3455987f07ca966fe55d6e4713e2ea9a1a69934cf4d82968a","observation_id":"c8765a90-2c1e-4b07-9d4b-8a5302dcb698","resolution":{"observed_at":"2026-06-26T07:54:58.047670Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T07:54:58.047670Z","title":"In: Proceedings of the International Conference on Machine Learning","venue":null,"work_id":null,"year":2011},"citing_paper":{"arxiv_id":"2606.23362","last_updated":"2026-06-22T14:00:06Z","snapshot_observed_at":"2026-08-02T22:23:28.390450Z","submitted_at":"2026-06-22T14:00:06Z","title":"TooBad: Backdoor Diffusion Models with Ultra-Low Poison Rate and Imperceptible Trigger","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-06-26T07:54:58.047670Z"},"links":{"citing_paper":"/paper/2606.23362"},"observation_digest":"sha256:9973bcaf50c5267e8118ad7ff34fa4717c5106f94c218dc2e7c34c4dc928f5db","observation_id":"81bde121-87a7-42b2-b75f-1ea2a40939af","resolution":{"observed_at":"2026-06-26T07:54:58.047670Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T07:54:58.047670Z","title":"In: Proceedings of the International Conference on Machine Learning","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2606.23362","last_updated":"2026-06-22T14:00:06Z","snapshot_observed_at":"2026-08-02T22:23:28.390450Z","submitted_at":"2026-06-22T14:00:06Z","title":"TooBad: Backdoor Diffusion Models with Ultra-Low Poison Rate and Imperceptible Trigger","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-06-26T07:54:58.047670Z"},"links":{"citing_paper":"/paper/2606.23362"},"observation_digest":"sha256:7df027e67429ea80d9801a79b415a45bde4da4e1b8ce77764b2b64b4fc387097","observation_id":"be7d938d-2f1f-4689-8659-cee5bbac3bb5","resolution":{"observed_at":"2026-06-26T07:54:58.047670Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T07:54:58.047670Z","title":"In: Advances in Neural Information Processing Systems (2023)","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2606.23362","last_updated":"2026-06-22T14:00:06Z","snapshot_observed_at":"2026-08-02T22:23:28.390450Z","submitted_at":"2026-06-22T14:00:06Z","title":"TooBad: Backdoor Diffusion Models with Ultra-Low Poison Rate and Imperceptible Trigger","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-06-26T07:54:58.047670Z"},"links":{"citing_paper":"/paper/2606.23362"},"observation_digest":"sha256:c657f2685e110921882cfd9ba685acb7aae3c1583df6949fad90aea8b3b0512a","observation_id":"da678235-12a8-4284-863b-fc667f45880d","resolution":{"observed_at":"2026-06-26T07:54:58.047670Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T07:54:58.047670Z","title":"In: Proceedings of the International Conference on Machine Learning","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2606.23362","last_updated":"2026-06-22T14:00:06Z","snapshot_observed_at":"2026-08-02T22:23:28.390450Z","submitted_at":"2026-06-22T14:00:06Z","title":"TooBad: Backdoor Diffusion Models with Ultra-Low Poison Rate and Imperceptible Trigger","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-06-26T07:54:58.047670Z"},"links":{"citing_paper":"/paper/2606.23362"},"observation_digest":"sha256:429bb56a11a184f948842459dec5ffe0c1bf52a816f9aa07eee2a5dd82f3da0b","observation_id":"6ad544d5-16d9-442d-b934-d1e9c27b656e","resolution":{"observed_at":"2026-06-26T07:54:58.047670Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T07:54:58.047670Z","title":"In: Proceedings of the International Conference on Learning Representations (2020) Title Suppressed Due to Excessive Length 17","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2606.23362","last_updated":"2026-06-22T14:00:06Z","snapshot_observed_at":"2026-08-02T22:23:28.390450Z","submitted_at":"2026-06-22T14:00:06Z","title":"TooBad: Backdoor Diffusion Models with Ultra-Low Poison Rate and Imperceptible Trigger","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-06-26T07:54:58.047670Z"},"links":{"citing_paper":"/paper/2606.23362"},"observation_digest":"sha256:9042a813ca1c0840ed3e612d5ea292efc085345855206f57326454e66603da82","observation_id":"39632226-a41b-4fe7-b679-a6a61bd17f2e","resolution":{"observed_at":"2026-06-26T07:54:58.047670Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T07:54:58.047670Z","title":"In: Pro- ceedings of the International Conference on Machine Learning","venue":null,"work_id":null,"year":2015},"citing_paper":{"arxiv_id":"2606.23362","last_updated":"2026-06-22T14:00:06Z","snapshot_observed_at":"2026-08-02T22:23:28.390450Z","submitted_at":"2026-06-22T14:00:06Z","title":"TooBad: Backdoor Diffusion Models with Ultra-Low Poison Rate and Imperceptible Trigger","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-06-26T07:54:58.047670Z"},"links":{"citing_paper":"/paper/2606.23362"},"observation_digest":"sha256:fe9a69bc370e4ce7199d2eb6b9baf062ae1d9624b48b3be4570139871f2ac01e","observation_id":"f6d7141c-4b9d-4150-a643-971f18887baf","resolution":{"observed_at":"2026-06-26T07:54:58.047670Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T07:54:58.047670Z","title":"In: Proceedings of the IEEE/CVF Conference on Computer Vision and Pattern Recognition","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2606.23362","last_updated":"2026-06-22T14:00:06Z","snapshot_observed_at":"2026-08-02T22:23:28.390450Z","submitted_at":"2026-06-22T14:00:06Z","title":"TooBad: Backdoor Diffusion Models with Ultra-Low Poison Rate and Imperceptible Trigger","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-06-26T07:54:58.047670Z"},"links":{"citing_paper":"/paper/2606.23362"},"observation_digest":"sha256:cdabd2a07d265a57d0917d996a1a8980f0b04fb6a15a27b2a7f6d6e6a7e363ce","observation_id":"30c44b90-4f4a-4599-b97b-a6953f970e8e","resolution":{"observed_at":"2026-06-26T07:54:58.047670Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T07:54:58.047670Z","title":"In: Proceedings of the AAAI conference on artificial intelligence","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2606.23362","last_updated":"2026-06-22T14:00:06Z","snapshot_observed_at":"2026-08-02T22:23:28.390450Z","submitted_at":"2026-06-22T14:00:06Z","title":"TooBad: Backdoor Diffusion Models with Ultra-Low Poison Rate and Imperceptible Trigger","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-06-26T07:54:58.047670Z"},"links":{"citing_paper":"/paper/2606.23362"},"observation_digest":"sha256:212594fd398cc233adf29d27265786c240699f840cad0bd98a9f1a17d786e002","observation_id":"204e3d23-a522-4eb3-b209-32883af6f9ff","resolution":{"observed_at":"2026-06-26T07:54:58.047670Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T07:54:58.047670Z","title":"In: Proceedings of the International Conference on Learning Representations (2021)","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2606.23362","last_updated":"2026-06-22T14:00:06Z","snapshot_observed_at":"2026-08-02T22:23:28.390450Z","submitted_at":"2026-06-22T14:00:06Z","title":"TooBad: Backdoor Diffusion Models with Ultra-Low Poison Rate and Imperceptible Trigger","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-06-26T07:54:58.047670Z"},"links":{"citing_paper":"/paper/2606.23362"},"observation_digest":"sha256:794addcfd0420d589a096e9b331f9c54e708764d3b66d858cfb8d084fce3168a","observation_id":"2c268b43-6084-479c-a7bd-b24e33eb58d8","resolution":{"observed_at":"2026-06-26T07:54:58.047670Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T07:54:58.047670Z","title":"In: Advances in Neural Information Processing Systems","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2606.23362","last_updated":"2026-06-22T14:00:06Z","snapshot_observed_at":"2026-08-02T22:23:28.390450Z","submitted_at":"2026-06-22T14:00:06Z","title":"TooBad: Backdoor Diffusion Models with Ultra-Low Poison Rate and Imperceptible Trigger","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-06-26T07:54:58.047670Z"},"links":{"citing_paper":"/paper/2606.23362"},"observation_digest":"sha256:7c0ea23fde68feff99713f4d7f0a4854e474786a7c5cce01a277ff2b5ea40f3b","observation_id":"08ac1b6e-5513-4f76-9fc1-e44f826c24f3","resolution":{"observed_at":"2026-06-26T07:54:58.047670Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T07:54:58.047670Z","title":"In: Proceed- ings of the International Conference on Learning Representations (2021)","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2606.23362","last_updated":"2026-06-22T14:00:06Z","snapshot_observed_at":"2026-08-02T22:23:28.390450Z","submitted_at":"2026-06-22T14:00:06Z","title":"TooBad: Backdoor Diffusion Models with Ultra-Low Poison Rate and Imperceptible Trigger","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-06-26T07:54:58.047670Z"},"links":{"citing_paper":"/paper/2606.23362"},"observation_digest":"sha256:958bb1120d5706fcd25a741d352dde8efefce7fed39abdafa66069d2c275f457","observation_id":"9ea0df7f-d0a1-43a3-88a1-41eadd31ac26","resolution":{"observed_at":"2026-06-26T07:54:58.047670Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T07:54:58.047670Z","title":"In: Proceedings of the IEEE/CVF International Conference on Computer Vision","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2606.23362","last_updated":"2026-06-22T14:00:06Z","snapshot_observed_at":"2026-08-02T22:23:28.390450Z","submitted_at":"2026-06-22T14:00:06Z","title":"TooBad: Backdoor Diffusion Models with Ultra-Low Poison Rate and Imperceptible Trigger","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-06-26T07:54:58.047670Z"},"links":{"citing_paper":"/paper/2606.23362"},"observation_digest":"sha256:dd360ca625e65a7d4c359b9dd61f0c77ca7350e4f6db8ee0012790acc49aa1b3","observation_id":"e12f6378-eea2-4204-a67f-cc860093b867","resolution":{"observed_at":"2026-06-26T07:54:58.047670Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T07:54:58.047670Z","title":"In: Advances in Neural Information Processing Systems","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2606.23362","last_updated":"2026-06-22T14:00:06Z","snapshot_observed_at":"2026-08-02T22:23:28.390450Z","submitted_at":"2026-06-22T14:00:06Z","title":"TooBad: Backdoor Diffusion Models with Ultra-Low Poison Rate and Imperceptible Trigger","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-06-26T07:54:58.047670Z"},"links":{"citing_paper":"/paper/2606.23362"},"observation_digest":"sha256:2673481b57f61b180ceef757c8aca6086c7a205cd072ceec9926757b56be991a","observation_id":"8f2a93cb-7e96-4c11-95ae-559d27e2be6c","resolution":{"observed_at":"2026-06-26T07:54:58.047670Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T07:54:58.047670Z","title":"ACM Computing Surveys57(8), 1–44 (2025)","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.23362","last_updated":"2026-06-22T14:00:06Z","snapshot_observed_at":"2026-08-02T22:23:28.390450Z","submitted_at":"2026-06-22T14:00:06Z","title":"TooBad: Backdoor Diffusion Models with Ultra-Low Poison Rate and Imperceptible Trigger","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-06-26T07:54:58.047670Z"},"links":{"citing_paper":"/paper/2606.23362"},"observation_digest":"sha256:a3ac713baafed909e3c6902fa308da7ad86b5dfc496f4e7eabc5d023c5ed46cf","observation_id":"4d93f967-ab55-41ca-8466-a21ed7ea7462","resolution":{"observed_at":"2026-06-26T07:54:58.047670Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2409.13945","last_updated":"2024-09-20T23:19:26Z","snapshot_observed_at":"2026-07-06T19:19:06.790588Z","submitted_at":"2024-09-20T23:19:26Z","title":"PureDiffusion: Using Backdoor to Counter Backdoor in Generative Diffusion Models","version":1},"cited_work":{"arxiv_id":"2409.13945","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2409.13945","snapshot_observed_at":"2026-07-04T11:39:46.306889Z","title":"arXiv preprint arXiv:2409.13945 (2024)","venue":null,"work_id":"054c8ee2-b30d-4279-a29d-16fa81c7e792","year":2024},"citing_paper":{"arxiv_id":"2606.23362","last_updated":"2026-06-22T14:00:06Z","snapshot_observed_at":"2026-08-02T22:23:28.390450Z","submitted_at":"2026-06-22T14:00:06Z","title":"TooBad: Backdoor Diffusion Models with Ultra-Low Poison Rate and Imperceptible Trigger","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-06-26T07:54:58.047670Z"},"links":{"cited_paper":"/paper/2409.13945","citing_paper":"/paper/2606.23362"},"observation_digest":"sha256:8a450d3e8bc44d775e9256c156da238fd1b2f777f662393f7c8c7c90c0dcd249","observation_id":"4303a652-b6f4-4815-80ab-b324a8cf433c","resolution":{"observed_at":"2026-07-04T11:39:46.308661Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T07:54:58.047670Z","title":"In: Proceedings of the IEEE Wireless Commu- nications and Networking Conference","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2606.23362","last_updated":"2026-06-22T14:00:06Z","snapshot_observed_at":"2026-08-02T22:23:28.390450Z","submitted_at":"2026-06-22T14:00:06Z","title":"TooBad: Backdoor Diffusion Models with Ultra-Low Poison Rate and Imperceptible Trigger","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-06-26T07:54:58.047670Z"},"links":{"citing_paper":"/paper/2606.23362"},"observation_digest":"sha256:33889434cc30e43d7593401e90f41df328cb24eb4513523802234ce940d7cee5","observation_id":"b1bb7f95-1f92-470a-b34e-2d5f43869e49","resolution":{"observed_at":"2026-06-26T07:54:58.047670Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2502.19047","last_updated":"2025-03-02T13:52:23Z","snapshot_observed_at":"2026-08-07T17:46:57.103426Z","submitted_at":"2025-02-26T11:01:43Z","title":"A Dual-Purpose Framework for Backdoor Defense and Backdoor Amplification in Diffusion Models","version":2},"cited_work":{"arxiv_id":"2502.19047","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2502.19047","snapshot_observed_at":"2026-07-04T11:39:46.303904Z","title":"arXiv preprint arXiv:2502.19047 (2025)","venue":null,"work_id":"02f16ea9-0360-4eee-831c-58303af36a9d","year":2025},"citing_paper":{"arxiv_id":"2606.23362","last_updated":"2026-06-22T14:00:06Z","snapshot_observed_at":"2026-08-02T22:23:28.390450Z","submitted_at":"2026-06-22T14:00:06Z","title":"TooBad: Backdoor Diffusion Models with Ultra-Low Poison Rate and Imperceptible Trigger","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-06-26T07:54:58.047670Z"},"links":{"cited_paper":"/paper/2502.19047","citing_paper":"/paper/2606.23362"},"observation_digest":"sha256:c3934c8a5a9518c4db14c1f266c94b255fb7fc94968e0f6e78027abd546255ee","observation_id":"b0a1ee09-d3ac-4186-b898-321b40ef90e6","resolution":{"observed_at":"2026-07-04T11:39:46.305617Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T07:54:58.047670Z","title":"In: Proceedings of the IEEE/CVF Conference on Computer Vision and Pattern Recognition","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2606.23362","last_updated":"2026-06-22T14:00:06Z","snapshot_observed_at":"2026-08-02T22:23:28.390450Z","submitted_at":"2026-06-22T14:00:06Z","title":"TooBad: Backdoor Diffusion Models with Ultra-Low Poison Rate and Imperceptible Trigger","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-06-26T07:54:58.047670Z"},"links":{"citing_paper":"/paper/2606.23362"},"observation_digest":"sha256:f69c454b1615632725849809137f147c54949773928ae35c828116eaeacb6b76","observation_id":"be35b0f8-a241-41ca-9a17-16a88d5123f3","resolution":{"observed_at":"2026-06-26T07:54:58.047670Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T07:54:58.047670Z","title":"In: Advances in Neural Information Processing Systems (2023)","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2606.23362","last_updated":"2026-06-22T14:00:06Z","snapshot_observed_at":"2026-08-02T22:23:28.390450Z","submitted_at":"2026-06-22T14:00:06Z","title":"TooBad: Backdoor Diffusion Models with Ultra-Low Poison Rate and Imperceptible Trigger","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-06-26T07:54:58.047670Z"},"links":{"citing_paper":"/paper/2606.23362"},"observation_digest":"sha256:6a47a7ddc101aac473d085202a2445c203988658bf341126399557ad37ed6489","observation_id":"353bfede-240b-429d-b5fd-cc34e5e4865d","resolution":{"observed_at":"2026-06-26T07:54:58.047670Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T07:54:58.047670Z","title":"IEEE Transactions on Image Process- ing13(4), 600–612 (2004)","venue":null,"work_id":null,"year":2004},"citing_paper":{"arxiv_id":"2606.23362","last_updated":"2026-06-22T14:00:06Z","snapshot_observed_at":"2026-08-02T22:23:28.390450Z","submitted_at":"2026-06-22T14:00:06Z","title":"TooBad: Backdoor Diffusion Models with Ultra-Low Poison Rate and Imperceptible Trigger","version":1},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-06-26T07:54:58.047670Z"},"links":{"citing_paper":"/paper/2606.23362"},"observation_digest":"sha256:fa66f424a5433ebdbacebd2928c7c03bf578a61c51a35efe336779734fda6ab7","observation_id":"d1422f48-c06c-41fb-bebd-729b6675cefe","resolution":{"observed_at":"2026-06-26T07:54:58.047670Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T07:54:58.047670Z","title":"In: Proceedings of the Interna- tional Conference on Learning Representations (2021)","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2606.23362","last_updated":"2026-06-22T14:00:06Z","snapshot_observed_at":"2026-08-02T22:23:28.390450Z","submitted_at":"2026-06-22T14:00:06Z","title":"TooBad: Backdoor Diffusion Models with Ultra-Low Poison Rate and Imperceptible Trigger","version":1},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-06-26T07:54:58.047670Z"},"links":{"citing_paper":"/paper/2606.23362"},"observation_digest":"sha256:a8dc4a44ab0392b92c676300b995fb6096a5b72efcd4993e05eb67a03e051fff","observation_id":"39ac369e-a471-42b9-b18f-a52c8af5e9b1","resolution":{"observed_at":"2026-06-26T07:54:58.047670Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T07:54:58.047670Z","title":"In: Proceedings of the IEEE/CVF Conference on Computer Vision and Pattern Recognition","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2606.23362","last_updated":"2026-06-22T14:00:06Z","snapshot_observed_at":"2026-08-02T22:23:28.390450Z","submitted_at":"2026-06-22T14:00:06Z","title":"TooBad: Backdoor Diffusion Models with Ultra-Low Poison Rate and Imperceptible Trigger","version":1},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-06-26T07:54:58.047670Z"},"links":{"citing_paper":"/paper/2606.23362"},"observation_digest":"sha256:d1580d74fb9a329a36e10359fbbb33571fe30c1997357a91c98abe58e889d20c","observation_id":"b4617627-17ac-4346-9b11-32a62b5819ea","resolution":{"observed_at":"2026-06-26T07:54:58.047670Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T07:54:58.047670Z","title":"In: Proceedings of the Interna- tional Conference on Learning Representations (2021)","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2606.23362","last_updated":"2026-06-22T14:00:06Z","snapshot_observed_at":"2026-08-02T22:23:28.390450Z","submitted_at":"2026-06-22T14:00:06Z","title":"TooBad: Backdoor Diffusion Models with Ultra-Low Poison Rate and Imperceptible Trigger","version":1},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-06-26T07:54:58.047670Z"},"links":{"citing_paper":"/paper/2606.23362"},"observation_digest":"sha256:a7c8e4b71b3c3829b9834bccdabe5fb1a95683c63db97fba2cb2e2d4a8872523","observation_id":"265598db-05a2-49c8-95c6-9ee037493502","resolution":{"observed_at":"2026-06-26T07:54:58.047670Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2106.10121","last_updated":"2021-06-18T13:22:12Z","snapshot_observed_at":"2026-07-06T11:20:43.002537Z","submitted_at":"2021-06-18T13:22:12Z","title":"ScoreGrad: Multivariate Probabilistic Time Series Forecasting with Continuous Energy-based Generative Models","version":1},"cited_work":{"arxiv_id":"2106.10121","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2106.10121","snapshot_observed_at":"2026-07-04T11:39:46.316801Z","title":"ScoreGrad : Multivariate probabilistic time series forecasting with continuous energy-based generative models","venue":null,"work_id":"ca5375a9-e647-4271-b479-2cf35517fe25","year":2021},"citing_paper":{"arxiv_id":"2606.23362","last_updated":"2026-06-22T14:00:06Z","snapshot_observed_at":"2026-08-02T22:23:28.390450Z","submitted_at":"2026-06-22T14:00:06Z","title":"TooBad: Backdoor Diffusion Models with Ultra-Low Poison Rate and Imperceptible Trigger","version":1},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-06-26T07:54:58.047670Z"},"links":{"cited_paper":"/paper/2106.10121","citing_paper":"/paper/2606.23362"},"observation_digest":"sha256:dd4924de0da7778cbf85e1e799fd89aa125ea449ea3ce2a287b3fba7a45b3506","observation_id":"5e2d963b-6aeb-4329-bd55-de00a884b44e","resolution":{"observed_at":"2026-07-04T11:39:46.318958Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T07:54:58.047670Z","title":"ACM Computing Surveys56(4), 1–39 (2023)","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2606.23362","last_updated":"2026-06-22T14:00:06Z","snapshot_observed_at":"2026-08-02T22:23:28.390450Z","submitted_at":"2026-06-22T14:00:06Z","title":"TooBad: Backdoor Diffusion Models with Ultra-Low Poison Rate and Imperceptible Trigger","version":1},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-06-26T07:54:58.047670Z"},"links":{"citing_paper":"/paper/2606.23362"},"observation_digest":"sha256:c5160aa3705fc70ae58aa9a01d46aee338d6d9cc1aa997dfd7450028a6e58c1d","observation_id":"5bcaea1d-bf5e-46ec-909d-a390953805ab","resolution":{"observed_at":"2026-06-26T07:54:58.047670Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T07:54:58.047670Z","title":"In: Proceedings of the International Symposium on Research in Sttacks, Intrusions and Defenses","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2606.23362","last_updated":"2026-06-22T14:00:06Z","snapshot_observed_at":"2026-08-02T22:23:28.390450Z","submitted_at":"2026-06-22T14:00:06Z","title":"TooBad: Backdoor Diffusion Models with Ultra-Low Poison Rate and Imperceptible Trigger","version":1},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-06-26T07:54:58.047670Z"},"links":{"citing_paper":"/paper/2606.23362"},"observation_digest":"sha256:aa2693740e9b98b2602efa2fb69178de1d48a6e4d05622487015ea2698c150c5","observation_id":"d593fa46-fe0e-4367-b5d9-1ba5bb8b7819","resolution":{"observed_at":"2026-06-26T07:54:58.047670Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T07:54:58.047670Z","title":"In: ACM Multimedia","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2606.23362","last_updated":"2026-06-22T14:00:06Z","snapshot_observed_at":"2026-08-02T22:23:28.390450Z","submitted_at":"2026-06-22T14:00:06Z","title":"TooBad: Backdoor Diffusion Models with Ultra-Low Poison Rate and Imperceptible Trigger","version":1},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-06-26T07:54:58.047670Z"},"links":{"citing_paper":"/paper/2606.23362"},"observation_digest":"sha256:480477ef452e64443442ffb680f3ef1f13148d1d118c47e3e4594c9bf2491888","observation_id":"df3f0d7a-a5df-4a1b-ab61-4ee99c271874","resolution":{"observed_at":"2026-06-26T07:54:58.047670Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-26T07:54:58.047670Z","title":"In: Proceedings of the IEEE International Conference on Data Mining","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2606.23362","last_updated":"2026-06-22T14:00:06Z","snapshot_observed_at":"2026-08-02T22:23:28.390450Z","submitted_at":"2026-06-22T14:00:06Z","title":"TooBad: Backdoor Diffusion Models with Ultra-Low Poison Rate and Imperceptible Trigger","version":1},"reference_index":58,"source":"pdf_text","source_observed_at":"2026-06-26T07:54:58.047670Z"},"links":{"citing_paper":"/paper/2606.23362"},"observation_digest":"sha256:e7066d087f7a54e971a28be6176423ddc913323e30e3718251d77d971da7ed7b","observation_id":"f5e2cb0d-4007-4f98-a75c-21bf4529b284","resolution":{"observed_at":"2026-06-26T07:54:58.047670Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2305.14671","last_updated":"2023-06-14T18:36:33Z","snapshot_observed_at":"2026-08-09T01:24:02.437850Z","submitted_at":"2023-05-24T03:25:32Z","title":"A Survey of Diffusion Models in Natural Language Processing","version":2},"cited_work":{"arxiv_id":"2305.14671","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2305.14671","snapshot_observed_at":"2026-07-04T11:39:46.313322Z","title":"arXiv preprint arXiv:2305.14671 (2023)","venue":null,"work_id":"5ffc8a10-193f-413e-9548-9dcc5c49415d","year":2023},"citing_paper":{"arxiv_id":"2606.23362","last_updated":"2026-06-22T14:00:06Z","snapshot_observed_at":"2026-08-02T22:23:28.390450Z","submitted_at":"2026-06-22T14:00:06Z","title":"TooBad: Backdoor Diffusion Models with Ultra-Low Poison Rate and Imperceptible Trigger","version":1},"reference_index":59,"source":"pdf_text","source_observed_at":"2026-06-26T07:54:58.047670Z"},"links":{"cited_paper":"/paper/2305.14671","citing_paper":"/paper/2606.23362"},"observation_digest":"sha256:0f45fdeb35d5f69812ed8692ad86956b4f08f728275757723026ac2dbaad95ed","observation_id":"b17d6276-0eb0-4afd-b5bd-c771b3df23b1","resolution":{"observed_at":"2026-07-04T11:39:46.315069Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2606.23362","last_updated":"2026-06-22T14:00:06Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-02T22:23:28.390450Z","submitted_at":"2026-06-22T14:00:06Z","title":"TooBad: Backdoor Diffusion Models with Ultra-Low Poison Rate and Imperceptible Trigger"},"reference_resolution":{"displayed":59,"state_counts":{"malformed_identifier":0,"metadata_mismatch":7,"parse_uncertain":0,"unresolved":47,"verified_exact":5,"verified_fuzzy":0},"total_outbound_references":59},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"thesis":"As of 10 August 2026, this Paper Citation Record lists 59 of 59 outbound references and 0 inbound Pith citation observations for arXiv:2606.23362."}