{"as_of":"2026-08-18T22:05:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:668058979b88c4ec94f65b9c1ffda3e82d6457c7e677eb5df85f67d0d9f28199","coverage":[{"denominator":68,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":68,"source":"paper_references, paper_reference_links","source_observed_at":"2026-07-02T11:45:33.273144Z","state":"measured"},{"denominator":68,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":68,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-18T06:34:40.430872+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2607.00362/citation-record","integrity":"/paper/2607.00362/integrity","json":"/paper/2607.00362/citation-record.json","paper":"/paper/2607.00362"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-06T02:51:52.466323Z","title":"https://developer.apple.com/documentation/avfoundation/avc am-building-a-camera-app, 2026","venue":null,"work_id":"8ad5c335-ddb9-4774-aae8-9763f2d845e8","year":2026},"citing_paper":{"arxiv_id":"2607.00362","last_updated":"2026-07-01T03:00:30Z","snapshot_observed_at":"2026-07-07T00:06:03.968882Z","submitted_at":"2026-07-01T03:00:30Z","title":"SoK: Attack and Defense Landscape of Mobile On-device AI Systems","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-07-02T11:45:33.273144Z"},"links":{"citing_paper":"/paper/2607.00362"},"observation_digest":"sha256:74d691aba4f6e704d7780e8f8e6d49b5509829d103a71a993e30d232eac8072f","observation_id":"fbf1f660-4587-4b83-a6cd-b7ffba46bad7","resolution":{"observed_at":"2026-07-06T02:51:52.468230Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-06T02:51:52.492487Z","title":"developer.android.com/media/camera/camerax, 2026","venue":null,"work_id":"d726db6c-6c5a-49b5-9546-a1bddcbf0a64","year":2026},"citing_paper":{"arxiv_id":"2607.00362","last_updated":"2026-07-01T03:00:30Z","snapshot_observed_at":"2026-07-07T00:06:03.968882Z","submitted_at":"2026-07-01T03:00:30Z","title":"SoK: Attack and Defense Landscape of Mobile On-device AI Systems","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-07-02T11:45:33.273144Z"},"links":{"citing_paper":"/paper/2607.00362"},"observation_digest":"sha256:3f5126aa01bfc0973be560b5d646407f4272523771fa045b48c1bc56126de093","observation_id":"1bcc91ea-d686-45aa-9b12-763db3f76af7","resolution":{"observed_at":"2026-07-06T02:51:52.493597Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-06T02:51:52.407791Z","title":"developer.apple.com/machine-learning/core-ml/, 2026","venue":null,"work_id":"2a48a606-85a1-4991-add2-1e7427b96b90","year":2026},"citing_paper":{"arxiv_id":"2607.00362","last_updated":"2026-07-01T03:00:30Z","snapshot_observed_at":"2026-07-07T00:06:03.968882Z","submitted_at":"2026-07-01T03:00:30Z","title":"SoK: Attack and Defense Landscape of Mobile On-device AI Systems","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-07-02T11:45:33.273144Z"},"links":{"citing_paper":"/paper/2607.00362"},"observation_digest":"sha256:33ed61e7babc869548a7ce175bee0c31e4593c85bc150819995f3f74bcb6d75d","observation_id":"8ef08c7b-0afd-4da8-a8b4-87de52a5efe6","resolution":{"observed_at":"2026-07-06T02:51:52.409047Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-06T02:51:52.380959Z","title":"https://executorch.ai/, 2026","venue":null,"work_id":"ba38ce94-6c7f-4ef1-b543-10ee769dd95b","year":2026},"citing_paper":{"arxiv_id":"2607.00362","last_updated":"2026-07-01T03:00:30Z","snapshot_observed_at":"2026-07-07T00:06:03.968882Z","submitted_at":"2026-07-01T03:00:30Z","title":"SoK: Attack and Defense Landscape of Mobile On-device AI Systems","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-07-02T11:45:33.273144Z"},"links":{"citing_paper":"/paper/2607.00362"},"observation_digest":"sha256:e1bfddefedc084db51558a53ce15b16b89741c51503663c659605cd7db3bc2d8","observation_id":"25d43070-6c24-4ecb-a407-f470e11dbc4d","resolution":{"observed_at":"2026-07-06T02:51:52.382365Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-06T02:51:52.499742Z","title":"https://developers.google.com/edge/litert-lm/mode ls/gemma-4, 2026","venue":null,"work_id":"527d4f72-0887-4cce-909d-119f52d3e3e1","year":2026},"citing_paper":{"arxiv_id":"2607.00362","last_updated":"2026-07-01T03:00:30Z","snapshot_observed_at":"2026-07-07T00:06:03.968882Z","submitted_at":"2026-07-01T03:00:30Z","title":"SoK: Attack and Defense Landscape of Mobile On-device AI Systems","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-07-02T11:45:33.273144Z"},"links":{"citing_paper":"/paper/2607.00362"},"observation_digest":"sha256:bffb43e1d7f897e476df6c20fb22730fdc5d698771191867d1ce6f1eb1489aa1","observation_id":"186958bd-2e58-43d6-8ba7-e92f1ac23dd1","resolution":{"observed_at":"2026-07-06T02:51:52.501025Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-06T02:51:52.490739Z","title":"https://developers.google.com/edge/litert/next/tenso r-sdk, 2026","venue":null,"work_id":"6b88aacb-7989-46c9-b6a7-23b3ae2e90a2","year":2026},"citing_paper":{"arxiv_id":"2607.00362","last_updated":"2026-07-01T03:00:30Z","snapshot_observed_at":"2026-07-07T00:06:03.968882Z","submitted_at":"2026-07-01T03:00:30Z","title":"SoK: Attack and Defense Landscape of Mobile On-device AI Systems","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-07-02T11:45:33.273144Z"},"links":{"citing_paper":"/paper/2607.00362"},"observation_digest":"sha256:ae4790c68f34171aaffd0e764247aa1ab203a5b748c2c3fb717898317fc47bdf","observation_id":"0108ec1d-843a-45b0-b2aa-f2872d3f9ce1","resolution":{"observed_at":"2026-07-06T02:51:52.491900Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-06T02:51:52.501719Z","title":"https://ai.google.dev/edge/litert, 2026","venue":null,"work_id":"a2918a28-e0bf-481d-9d4b-0dc03182560e","year":2026},"citing_paper":{"arxiv_id":"2607.00362","last_updated":"2026-07-01T03:00:30Z","snapshot_observed_at":"2026-07-07T00:06:03.968882Z","submitted_at":"2026-07-01T03:00:30Z","title":"SoK: Attack and Defense Landscape of Mobile On-device AI Systems","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-07-02T11:45:33.273144Z"},"links":{"citing_paper":"/paper/2607.00362"},"observation_digest":"sha256:a7e44ec029945e592d54cd9dfef1058e56cbb5a77951c14da9a08bc65c028f9d","observation_id":"09be9827-0f92-4cf2-91b6-397ca90cf3ce","resolution":{"observed_at":"2026-07-06T02:51:52.503138Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-06T02:51:52.466438Z","title":"https://developer.apple.com/documentation/coreml/m lfeaturevalue, 2026","venue":null,"work_id":"860297f7-8ea7-49db-ab73-6f2b63248716","year":2026},"citing_paper":{"arxiv_id":"2607.00362","last_updated":"2026-07-01T03:00:30Z","snapshot_observed_at":"2026-07-07T00:06:03.968882Z","submitted_at":"2026-07-01T03:00:30Z","title":"SoK: Attack and Defense Landscape of Mobile On-device AI Systems","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-07-02T11:45:33.273144Z"},"links":{"citing_paper":"/paper/2607.00362"},"observation_digest":"sha256:7a236d321dd12ed159f87e397b259452d3fa00db8b1cdc99f46ae69f8ef6a833","observation_id":"fedc2f78-2d64-4bca-9878-525c015919c8","resolution":{"observed_at":"2026-07-06T02:51:52.467995Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-06T02:51:52.447196Z","title":"https://apple.fandom.com/wiki/Neural Engine, 2026","venue":null,"work_id":"048449f0-e9fa-44cb-b43c-b506f0bafd0f","year":2026},"citing_paper":{"arxiv_id":"2607.00362","last_updated":"2026-07-01T03:00:30Z","snapshot_observed_at":"2026-07-07T00:06:03.968882Z","submitted_at":"2026-07-01T03:00:30Z","title":"SoK: Attack and Defense Landscape of Mobile On-device AI Systems","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-07-02T11:45:33.273144Z"},"links":{"citing_paper":"/paper/2607.00362"},"observation_digest":"sha256:e36197b059c46d6372208f9684367b0343ff1e4f2539095a9f40c361fc0f1056","observation_id":"93a454e5-8d2b-4be1-bd7b-0cce4bb982dd","resolution":{"observed_at":"2026-07-06T02:51:52.448956Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-06T02:51:52.497894Z","title":"https://developers.googleblog.com/on-device-genai -in-chrome-chromebook-plus-and-pixel-watch-with-litert-lm/, 2026","venue":null,"work_id":"0f046223-565a-4866-b49a-ef00bc0520d7","year":2026},"citing_paper":{"arxiv_id":"2607.00362","last_updated":"2026-07-01T03:00:30Z","snapshot_observed_at":"2026-07-07T00:06:03.968882Z","submitted_at":"2026-07-01T03:00:30Z","title":"SoK: Attack and Defense Landscape of Mobile On-device AI Systems","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-07-02T11:45:33.273144Z"},"links":{"citing_paper":"/paper/2607.00362"},"observation_digest":"sha256:16b45580d44056659c2968751e63dd8262e4845d80003cef3cba280b8daba855","observation_id":"bbbe2bdc-d4b8-45ed-92d5-f449477ba504","resolution":{"observed_at":"2026-07-06T02:51:52.499176Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-06T02:51:52.494081Z","title":"https://developers.google.com/edge/lit ert/conversion/tensorflow/build/ondevice training, 2026","venue":null,"work_id":"72622189-341f-462c-a549-bbf21f2b993e","year":2026},"citing_paper":{"arxiv_id":"2607.00362","last_updated":"2026-07-01T03:00:30Z","snapshot_observed_at":"2026-07-07T00:06:03.968882Z","submitted_at":"2026-07-01T03:00:30Z","title":"SoK: Attack and Defense Landscape of Mobile On-device AI Systems","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-07-02T11:45:33.273144Z"},"links":{"citing_paper":"/paper/2607.00362"},"observation_digest":"sha256:aedeaa895dc6960554f528a66dcd63ec7fb00fe1440bdbe0ea465e3b6dd7329d","observation_id":"ca911525-2da9-4a1c-8810-60dfa22a90b0","resolution":{"observed_at":"2026-07-06T02:51:52.495252Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-06T02:51:52.464505Z","title":"https://onnx.ai/, 2026","venue":null,"work_id":"516f9c41-b50f-42c4-9f6e-c49d90d6018e","year":2026},"citing_paper":{"arxiv_id":"2607.00362","last_updated":"2026-07-01T03:00:30Z","snapshot_observed_at":"2026-07-07T00:06:03.968882Z","submitted_at":"2026-07-01T03:00:30Z","title":"SoK: Attack and Defense Landscape of Mobile On-device AI Systems","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-07-02T11:45:33.273144Z"},"links":{"citing_paper":"/paper/2607.00362"},"observation_digest":"sha256:3e5783bbd65ced9c33f1358cdb7eeccd19b67535ae6a92fd6c410db42f5141d6","observation_id":"13a266c6-3a62-4941-8dcd-2a06c8c65ea8","resolution":{"observed_at":"2026-07-06T02:51:52.465721Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-06T02:51:52.489160Z","title":"www.qualcomm.com/processors/hexagon, 2026","venue":null,"work_id":"93763366-3414-4086-a116-03c68b562db0","year":2026},"citing_paper":{"arxiv_id":"2607.00362","last_updated":"2026-07-01T03:00:30Z","snapshot_observed_at":"2026-07-07T00:06:03.968882Z","submitted_at":"2026-07-01T03:00:30Z","title":"SoK: Attack and Defense Landscape of Mobile On-device AI Systems","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-07-02T11:45:33.273144Z"},"links":{"citing_paper":"/paper/2607.00362"},"observation_digest":"sha256:6161e30e637568b00fda1b07a4266b37b7c7e873508217751fdaa3962d9f7d99","observation_id":"66a54461-2fa1-47f0-9208-ddb934b7ef94","resolution":{"observed_at":"2026-07-06T02:51:52.490325Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-06T02:51:52.527295Z","title":"https://ai.google.dev/edge/api/tflite/java/org/tensorflow/ lite/support/image/TensorImage, 2026","venue":null,"work_id":"3bdd9841-41bf-469b-ae4b-a85b87773ca7","year":2026},"citing_paper":{"arxiv_id":"2607.00362","last_updated":"2026-07-01T03:00:30Z","snapshot_observed_at":"2026-07-07T00:06:03.968882Z","submitted_at":"2026-07-01T03:00:30Z","title":"SoK: Attack and Defense Landscape of Mobile On-device AI Systems","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-07-02T11:45:33.273144Z"},"links":{"citing_paper":"/paper/2607.00362"},"observation_digest":"sha256:d71953f326f94d63dfd95e5dcf93cf87b6c8ff69397d70aecf904833035d0d2f","observation_id":"c8598d6e-40b5-4469-943f-9e8055d4a960","resolution":{"observed_at":"2026-07-06T02:51:52.528914Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-06T02:51:52.531495Z","title":"Offline model guard: secure and private ml on mobile devices","venue":null,"work_id":"94ebd789-a148-47d7-a117-710dd8bb8039","year":2020},"citing_paper":{"arxiv_id":"2607.00362","last_updated":"2026-07-01T03:00:30Z","snapshot_observed_at":"2026-07-07T00:06:03.968882Z","submitted_at":"2026-07-01T03:00:30Z","title":"SoK: Attack and Defense Landscape of Mobile On-device AI Systems","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-07-02T11:45:33.273144Z"},"links":{"citing_paper":"/paper/2607.00362"},"observation_digest":"sha256:25e01e60d5c628ca1d3ea566a131b600cafac32e29d8edad91ebb6d975b2ca2d","observation_id":"3ab93a04-3f54-4c21-b969-91c2296263a2","resolution":{"observed_at":"2026-07-06T02:51:52.532785Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-06T02:51:52.507725Z","title":"Efficient compositional multi-tasking for on-device large language models","venue":null,"work_id":"94033bbb-e936-45b8-9b24-9575d76d6f38","year":2025},"citing_paper":{"arxiv_id":"2607.00362","last_updated":"2026-07-01T03:00:30Z","snapshot_observed_at":"2026-07-07T00:06:03.968882Z","submitted_at":"2026-07-01T03:00:30Z","title":"SoK: Attack and Defense Landscape of Mobile On-device AI Systems","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-07-02T11:45:33.273144Z"},"links":{"citing_paper":"/paper/2607.00362"},"observation_digest":"sha256:5465ed14d90745761dfa14dab5eaee97c5780244119b942009c880a7ea1c5350","observation_id":"92b5f735-1b09-49aa-8e29-b39b5e2ae46e","resolution":{"observed_at":"2026-07-06T02:51:52.508927Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-06T02:51:52.441583Z","title":"Sanctuary: Arming trustzone with user-space enclaves","venue":null,"work_id":"2b5c70af-07bf-4f14-8194-a4fa01e85829","year":2019},"citing_paper":{"arxiv_id":"2607.00362","last_updated":"2026-07-01T03:00:30Z","snapshot_observed_at":"2026-07-07T00:06:03.968882Z","submitted_at":"2026-07-01T03:00:30Z","title":"SoK: Attack and Defense Landscape of Mobile On-device AI Systems","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-07-02T11:45:33.273144Z"},"links":{"citing_paper":"/paper/2607.00362"},"observation_digest":"sha256:2c82e3654fb7f8702c639effd34b64578a2319ffa19cdbc499aeb694f379e31b","observation_id":"125f479b-d70b-4ac4-aeb4-97a086717232","resolution":{"observed_at":"2026-07-06T02:51:52.446186Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-06T02:51:52.459637Z","title":"Improving end-to-end neural diarization using conversational summary representations","venue":null,"work_id":"b5aa97c2-997b-4b9a-8d7f-88b6c9fa7b0f","year":2023},"citing_paper":{"arxiv_id":"2607.00362","last_updated":"2026-07-01T03:00:30Z","snapshot_observed_at":"2026-07-07T00:06:03.968882Z","submitted_at":"2026-07-01T03:00:30Z","title":"SoK: Attack and Defense Landscape of Mobile On-device AI Systems","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-07-02T11:45:33.273144Z"},"links":{"citing_paper":"/paper/2607.00362"},"observation_digest":"sha256:499e9f6b0362cadcd2de7804b675fd0614e8067860c39c0754d40c929fa3097e","observation_id":"66f0fd2f-34b9-4859-bf80-2b84dc1de464","resolution":{"observed_at":"2026-07-06T02:51:52.461164Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-06T02:51:52.446547Z","title":"Cheating your apps: Black-box adversarial attacks on deep learning apps.Journal of Software: Evolution and Process, 36(4):e2528, 2024","venue":null,"work_id":"9bd80329-17b4-4513-b9f9-f19de1da402c","year":2024},"citing_paper":{"arxiv_id":"2607.00362","last_updated":"2026-07-01T03:00:30Z","snapshot_observed_at":"2026-07-07T00:06:03.968882Z","submitted_at":"2026-07-01T03:00:30Z","title":"SoK: Attack and Defense Landscape of Mobile On-device AI Systems","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-07-02T11:45:33.273144Z"},"links":{"citing_paper":"/paper/2607.00362"},"observation_digest":"sha256:00251fc5e9c72f38ee09f7827cfa3c67aaccd483f880976334ce2cc616630e07","observation_id":"b8a66f6f-bcb5-4354-b47c-d7acec847c94","resolution":{"observed_at":"2026-07-06T02:51:52.448019Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-06T02:51:52.496113Z","title":"Guardiann: Fast and secure on- device inference in trustzone using embedded sram and cryptographic hardware","venue":null,"work_id":"65334b12-3e7b-4d7c-8424-3298f4849eca","year":2022},"citing_paper":{"arxiv_id":"2607.00362","last_updated":"2026-07-01T03:00:30Z","snapshot_observed_at":"2026-07-07T00:06:03.968882Z","submitted_at":"2026-07-01T03:00:30Z","title":"SoK: Attack and Defense Landscape of Mobile On-device AI Systems","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-07-02T11:45:33.273144Z"},"links":{"citing_paper":"/paper/2607.00362"},"observation_digest":"sha256:3a76fe082593f852539719d480659b6fa66add8f8e967ef744d32e9e16a334f7","observation_id":"9c5e6edf-ae9f-460e-821c-b4b3f543a1d8","resolution":{"observed_at":"2026-07-06T02:51:52.497327Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-06T02:51:52.451982Z","title":"Understanding real-world threats to deep learning models in android apps","venue":null,"work_id":"375df31d-2f1a-46d8-afef-a5a7b2c6338d","year":2022},"citing_paper":{"arxiv_id":"2607.00362","last_updated":"2026-07-01T03:00:30Z","snapshot_observed_at":"2026-07-07T00:06:03.968882Z","submitted_at":"2026-07-01T03:00:30Z","title":"SoK: Attack and Defense Landscape of Mobile On-device AI Systems","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-07-02T11:45:33.273144Z"},"links":{"citing_paper":"/paper/2607.00362"},"observation_digest":"sha256:0d3bcb7e1ab26e8e86216f48565337eedbf9533a81ed7a8aac3f59e291d1a9dc","observation_id":"6a056406-88b6-457c-a922-f15b52feae11","resolution":{"observed_at":"2026-07-06T02:51:52.453543Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-06T02:51:52.452644Z","title":"Hybridtee: Secure mobile dnn execution using hybrid trusted execution environment","venue":null,"work_id":"d12d70b8-c159-4187-9fad-98b1c3db0854","year":2020},"citing_paper":{"arxiv_id":"2607.00362","last_updated":"2026-07-01T03:00:30Z","snapshot_observed_at":"2026-07-07T00:06:03.968882Z","submitted_at":"2026-07-01T03:00:30Z","title":"SoK: Attack and Defense Landscape of Mobile On-device AI Systems","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-07-02T11:45:33.273144Z"},"links":{"citing_paper":"/paper/2607.00362"},"observation_digest":"sha256:ad28a971f7d4f3ec2d29cbb1af09b5ed752c1d0b8053511c9551e1f1a30c1903","observation_id":"d5f3cf13-4987-445b-b92c-6daaaaa68a33","resolution":{"observed_at":"2026-07-06T02:51:52.453959Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-06T02:51:52.529655Z","title":"Secure and efficient mobile dnn using trusted execution environments","venue":null,"work_id":"daba8487-806c-4256-a231-8eab11a74a7f","year":2023},"citing_paper":{"arxiv_id":"2607.00362","last_updated":"2026-07-01T03:00:30Z","snapshot_observed_at":"2026-07-07T00:06:03.968882Z","submitted_at":"2026-07-01T03:00:30Z","title":"SoK: Attack and Defense Landscape of Mobile On-device AI Systems","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-07-02T11:45:33.273144Z"},"links":{"citing_paper":"/paper/2607.00362"},"observation_digest":"sha256:3e04ba584dfd27cedb1e1d35ee18c51441110c04a6dcab1373f65ddf91f0ef12","observation_id":"4d8df976-224a-45b3-a4f2-b211edfeeaa0","resolution":{"observed_at":"2026-07-06T02:51:52.530912Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-06T02:51:52.476891Z","title":"A first look at on-device models in ios apps.ACM Transactions on Software Engineering and Methodology, 33(1):1–30, 2023","venue":null,"work_id":"a1ae6c04-c006-4993-b5ba-f1c949564176","year":2023},"citing_paper":{"arxiv_id":"2607.00362","last_updated":"2026-07-01T03:00:30Z","snapshot_observed_at":"2026-07-07T00:06:03.968882Z","submitted_at":"2026-07-01T03:00:30Z","title":"SoK: Attack and Defense Landscape of Mobile On-device AI Systems","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-07-02T11:45:33.273144Z"},"links":{"citing_paper":"/paper/2607.00362"},"observation_digest":"sha256:f7471be653e022b300a5c28f239dfcae21d9347057267b1e02f9f244c1ffb81c","observation_id":"9f7f768f-8ee4-4ffb-a4c5-57dbad6d75c1","resolution":{"observed_at":"2026-07-06T02:51:52.482906Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-06T02:51:52.490880Z","title":"Mmguard: Automatically protecting on-device deep learning models in android apps","venue":null,"work_id":"79de9110-5522-4e1f-96ee-cbe52ba17dff","year":2021},"citing_paper":{"arxiv_id":"2607.00362","last_updated":"2026-07-01T03:00:30Z","snapshot_observed_at":"2026-07-07T00:06:03.968882Z","submitted_at":"2026-07-01T03:00:30Z","title":"SoK: Attack and Defense Landscape of Mobile On-device AI Systems","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-07-02T11:45:33.273144Z"},"links":{"citing_paper":"/paper/2607.00362"},"observation_digest":"sha256:0735c18115c6037276fb64fe5a5a78641494240fcdc9a836e7249f15f5766201","observation_id":"de5f3506-4589-434e-a77e-a7853fb38f37","resolution":{"observed_at":"2026-07-06T02:51:52.492060Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-06T02:51:52.497609Z","title":"Malmodel: Hiding malicious payload in mo- bile deep learning models with black-box backdoor attack.Automated Software Engineering, 33(1):28, 2026","venue":null,"work_id":"de2b0f04-966e-48f7-985e-194c91c08ca3","year":2026},"citing_paper":{"arxiv_id":"2607.00362","last_updated":"2026-07-01T03:00:30Z","snapshot_observed_at":"2026-07-07T00:06:03.968882Z","submitted_at":"2026-07-01T03:00:30Z","title":"SoK: Attack and Defense Landscape of Mobile On-device AI Systems","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-07-02T11:45:33.273144Z"},"links":{"citing_paper":"/paper/2607.00362"},"observation_digest":"sha256:adfe2e77e2788acdfd586f84bd6e5a7e9b4351036db2001664f0a711fba49059","observation_id":"4842fd4c-c409-41ef-a1da-796bc8d804ed","resolution":{"observed_at":"2026-07-06T02:51:52.499012Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-06T02:51:52.435979Z","title":"Smart app attack: hacking deep learning models in android apps.IEEE Transactions on Information Forensics and Security, 17:1827–1840, 2022","venue":null,"work_id":"0a814530-5901-44a6-88e9-68d140389fd8","year":2022},"citing_paper":{"arxiv_id":"2607.00362","last_updated":"2026-07-01T03:00:30Z","snapshot_observed_at":"2026-07-07T00:06:03.968882Z","submitted_at":"2026-07-01T03:00:30Z","title":"SoK: Attack and Defense Landscape of Mobile On-device AI Systems","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-07-02T11:45:33.273144Z"},"links":{"citing_paper":"/paper/2607.00362"},"observation_digest":"sha256:fa0d9926d0d24630623402e9d1f14a00fd7afb3bd01d48d704a0d9e9769836b4","observation_id":"9ecea03d-7bb3-4d97-beeb-e073a9867341","resolution":{"observed_at":"2026-07-06T02:51:52.437338Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-06T02:51:52.437994Z","title":"Robustness of on- device models: Adversarial attack to deep learning models on android apps","venue":null,"work_id":"5e7b4b48-185b-4b00-8334-4609a386dba6","year":2021},"citing_paper":{"arxiv_id":"2607.00362","last_updated":"2026-07-01T03:00:30Z","snapshot_observed_at":"2026-07-07T00:06:03.968882Z","submitted_at":"2026-07-01T03:00:30Z","title":"SoK: Attack and Defense Landscape of Mobile On-device AI Systems","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-07-02T11:45:33.273144Z"},"links":{"citing_paper":"/paper/2607.00362"},"observation_digest":"sha256:94d8cc1e6843cf9353be8a028d7e3984a425851eb51074177cad6b62e3135d98","observation_id":"eb755615-860e-4379-b90b-ce5081d0d0e7","resolution":{"observed_at":"2026-07-06T02:51:52.439185Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-06T02:51:52.468935Z","title":"Typhon unleashed: Practical adversarial weight attacks against on-device deep learning models.IEEE Transactions on Dependable and Secure Computing, 2026","venue":null,"work_id":"021d0804-97c2-47f6-8b11-a1bd15f4049c","year":2026},"citing_paper":{"arxiv_id":"2607.00362","last_updated":"2026-07-01T03:00:30Z","snapshot_observed_at":"2026-07-07T00:06:03.968882Z","submitted_at":"2026-07-01T03:00:30Z","title":"SoK: Attack and Defense Landscape of Mobile On-device AI Systems","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-07-02T11:45:33.273144Z"},"links":{"citing_paper":"/paper/2607.00362"},"observation_digest":"sha256:dca30c60abeadab16e1c855ecfea6ff4a78b908de070ef6d48546179865d69b7","observation_id":"5b2242bd-1797-4f92-bd88-e99470dd023c","resolution":{"observed_at":"2026-07-06T02:51:52.470441Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-06T02:51:52.379604Z","title":"Themis: Towards practical intellectual property protection for post-deployment on-device deep learning models","venue":null,"work_id":"d4349a63-f176-47dc-a853-e1a835c0234a","year":2025},"citing_paper":{"arxiv_id":"2607.00362","last_updated":"2026-07-01T03:00:30Z","snapshot_observed_at":"2026-07-07T00:06:03.968882Z","submitted_at":"2026-07-01T03:00:30Z","title":"SoK: Attack and Defense Landscape of Mobile On-device AI Systems","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-07-02T11:45:33.273144Z"},"links":{"citing_paper":"/paper/2607.00362"},"observation_digest":"sha256:1f1df5fea8e921a43c995c97388ea41ebc1ad9686244ffee8b77aabc0bce8d6d","observation_id":"65f4bfb1-d2e1-4270-9190-a45f871053a4","resolution":{"observed_at":"2026-07-06T02:51:52.381078Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2411.07114","last_updated":"2024-11-11T16:41:22Z","snapshot_observed_at":"2026-08-16T13:01:06.573626Z","submitted_at":"2024-11-11T16:41:22Z","title":"TinyML Security: Exploring Vulnerabilities in Resource-Constrained Machine Learning Systems","version":1},"cited_work":{"arxiv_id":"2411.07114","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2411.07114","snapshot_observed_at":"2026-07-02T11:46:54.729946Z","title":"Tinyml security: Explor- ing vulnerabilities in resource-constrained machine learning systems","venue":null,"work_id":"749b5402-08e8-46d7-b741-b55cae1ee3ef","year":2024},"citing_paper":{"arxiv_id":"2607.00362","last_updated":"2026-07-01T03:00:30Z","snapshot_observed_at":"2026-07-07T00:06:03.968882Z","submitted_at":"2026-07-01T03:00:30Z","title":"SoK: Attack and Defense Landscape of Mobile On-device AI Systems","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-07-02T11:45:33.273144Z"},"links":{"cited_paper":"/paper/2411.07114","citing_paper":"/paper/2607.00362"},"observation_digest":"sha256:82c4cbfbd026fc773d1aa94b3f00edbd2e696b32db9e24d0459b63b33591517d","observation_id":"68b473df-f4e2-471b-af51-24378e1c4e92","resolution":{"observed_at":"2026-07-02T11:46:54.731712Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-06T02:51:52.414079Z","title":"Confidential execution of deep learning inference at the untrusted edge with arm trustzone","venue":null,"work_id":"2a0410af-ed63-4d16-8103-3cbd3c9c64d9","year":2023},"citing_paper":{"arxiv_id":"2607.00362","last_updated":"2026-07-01T03:00:30Z","snapshot_observed_at":"2026-07-07T00:06:03.968882Z","submitted_at":"2026-07-01T03:00:30Z","title":"SoK: Attack and Defense Landscape of Mobile On-device AI Systems","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-07-02T11:45:33.273144Z"},"links":{"citing_paper":"/paper/2607.00362"},"observation_digest":"sha256:ee70b75b021212a77d78497ef7b4f21ce4025cad70982e67ea9d12f671692d4e","observation_id":"45313ff8-851a-4373-82c6-908386eb432a","resolution":{"observed_at":"2026-07-06T02:51:52.416425Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-06T02:51:52.429609Z","title":null,"venue":null,"work_id":"7bf1f847-dd3c-4393-aabf-4f98ef8a509b","year":2025},"citing_paper":{"arxiv_id":"2607.00362","last_updated":"2026-07-01T03:00:30Z","snapshot_observed_at":"2026-07-07T00:06:03.968882Z","submitted_at":"2026-07-01T03:00:30Z","title":"SoK: Attack and Defense Landscape of Mobile On-device AI Systems","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-07-02T11:45:33.273144Z"},"links":{"citing_paper":"/paper/2607.00362"},"observation_digest":"sha256:f338b3924d09c239f16bd73d954e9b8bdd8122f03a70f1c3c0fe17ebdfda2429","observation_id":"2790b0cd-f662-41cc-8a67-2173817b120d","resolution":{"observed_at":"2026-07-06T02:51:52.431443Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-06T02:51:52.450598Z","title":"Redlc: Learning-driven reverse engi- neering for deep learning compilers","venue":null,"work_id":"ee9009c4-0482-456a-b1ff-f6e2c6d0cd0e","year":null},"citing_paper":{"arxiv_id":"2607.00362","last_updated":"2026-07-01T03:00:30Z","snapshot_observed_at":"2026-07-07T00:06:03.968882Z","submitted_at":"2026-07-01T03:00:30Z","title":"SoK: Attack and Defense Landscape of Mobile On-device AI Systems","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-07-02T11:45:33.273144Z"},"links":{"citing_paper":"/paper/2607.00362"},"observation_digest":"sha256:926a69281f21620c33d7e140f4794ea8e469309e4cfd154c0bc928226a26e98a","observation_id":"f9a3dcaa-56ec-4805-abcc-6f55b3862051","resolution":{"observed_at":"2026-07-06T02:51:52.452122Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-06T02:51:52.462508Z","title":"Efficient layout- guided image inpainting for mobile use","venue":null,"work_id":"99febff9-113b-4381-b086-7a122784c2ff","year":2024},"citing_paper":{"arxiv_id":"2607.00362","last_updated":"2026-07-01T03:00:30Z","snapshot_observed_at":"2026-07-07T00:06:03.968882Z","submitted_at":"2026-07-01T03:00:30Z","title":"SoK: Attack and Defense Landscape of Mobile On-device AI Systems","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-07-02T11:45:33.273144Z"},"links":{"citing_paper":"/paper/2607.00362"},"observation_digest":"sha256:b87cd98ee52df148212dc1eda55b75aa9bea7278bf0f8bd7b452d18104a6ae3f","observation_id":"05596338-5a9d-45a6-81b9-a4dffddefe2d","resolution":{"observed_at":"2026-07-06T02:51:52.463914Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-06T02:51:52.499554Z","title":"Deeppayload: Black-box backdoor attack on deep learning models through neural payload injection","venue":null,"work_id":"692ac83c-86a9-4e4b-87ef-5e95045f371b","year":2021},"citing_paper":{"arxiv_id":"2607.00362","last_updated":"2026-07-01T03:00:30Z","snapshot_observed_at":"2026-07-07T00:06:03.968882Z","submitted_at":"2026-07-01T03:00:30Z","title":"SoK: Attack and Defense Landscape of Mobile On-device AI Systems","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-07-02T11:45:33.273144Z"},"links":{"citing_paper":"/paper/2607.00362"},"observation_digest":"sha256:4a82a9ed017798db37200062e4db3e2d1f085d4100d34109e727fc4f4d3d1e52","observation_id":"f6687c49-a4b5-4e78-aa34-0dd605476cf3","resolution":{"observed_at":"2026-07-06T02:51:52.500803Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-06T02:51:52.535758Z","title":"Model extraction attack against on-device deep learning with power side channel","venue":null,"work_id":"ac102de5-a1e9-47dc-8cd1-9c75c300c8f6","year":2024},"citing_paper":{"arxiv_id":"2607.00362","last_updated":"2026-07-01T03:00:30Z","snapshot_observed_at":"2026-07-07T00:06:03.968882Z","submitted_at":"2026-07-01T03:00:30Z","title":"SoK: Attack and Defense Landscape of Mobile On-device AI Systems","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-07-02T11:45:33.273144Z"},"links":{"citing_paper":"/paper/2607.00362"},"observation_digest":"sha256:a4807a0d364cc26682f72cd1999061aa064c3f8dea65dcefcb195bbdc50fb7db","observation_id":"6e00d371-4c85-4230-8eb0-e2af2ec042f9","resolution":{"observed_at":"2026-07-06T02:51:52.537604Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-06T02:51:52.472814Z","title":"Secdeep: Secure and performant on-device deep learning inference framework for mobile and iot devices","venue":null,"work_id":"e2048c07-5dda-4b0c-9158-64e7e6fd0ba0","year":2021},"citing_paper":{"arxiv_id":"2607.00362","last_updated":"2026-07-01T03:00:30Z","snapshot_observed_at":"2026-07-07T00:06:03.968882Z","submitted_at":"2026-07-01T03:00:30Z","title":"SoK: Attack and Defense Landscape of Mobile On-device AI Systems","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-07-02T11:45:33.273144Z"},"links":{"citing_paper":"/paper/2607.00362"},"observation_digest":"sha256:b8139d365f2c5c475061619221a53f8158a7360b0a2772925bfc3ff2feed41ce","observation_id":"9e267bbd-f2fe-4118-8ebc-857296854dcd","resolution":{"observed_at":"2026-07-06T02:51:52.474122Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-06T02:51:52.483617Z","title":"Deepcache: Revisiting cache side-channel attacks in deep neural networks executables","venue":null,"work_id":"8b824a80-77a6-4387-b42a-2fe222c74965","year":2024},"citing_paper":{"arxiv_id":"2607.00362","last_updated":"2026-07-01T03:00:30Z","snapshot_observed_at":"2026-07-07T00:06:03.968882Z","submitted_at":"2026-07-01T03:00:30Z","title":"SoK: Attack and Defense Landscape of Mobile On-device AI Systems","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-07-02T11:45:33.273144Z"},"links":{"citing_paper":"/paper/2607.00362"},"observation_digest":"sha256:a26abcf4c85c098a3413a47d96efcc9b869d4c269131c27c1810660bdbddf943","observation_id":"3408ef87-11b8-47d1-b8e8-884a56f8cfee","resolution":{"observed_at":"2026-07-06T02:51:52.484787Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-06T02:51:52.487371Z","title":"Mir- rornet: A tee-friendly framework for secure on-device dnn inference","venue":null,"work_id":"80ff2831-4058-4898-abd8-c03c8912469f","year":2023},"citing_paper":{"arxiv_id":"2607.00362","last_updated":"2026-07-01T03:00:30Z","snapshot_observed_at":"2026-07-07T00:06:03.968882Z","submitted_at":"2026-07-01T03:00:30Z","title":"SoK: Attack and Defense Landscape of Mobile On-device AI Systems","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-07-02T11:45:33.273144Z"},"links":{"citing_paper":"/paper/2607.00362"},"observation_digest":"sha256:bc0d92c89eabaf77c669dd91a933737e76d3256d4f0fa93d4c030ac9b12e2248","observation_id":"a5393100-adfd-4bde-a16a-f5eea5a4add5","resolution":{"observed_at":"2026-07-06T02:51:52.488576Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-06T02:51:52.409749Z","title":"Quantization backdoors to deep learning commercial frame- works.IEEE Transactions on Dependable and Secure Computing, 21(3):1155–1172, 2023","venue":null,"work_id":"2be742a7-a548-482d-b0a5-3e27cd2a7bd0","year":2023},"citing_paper":{"arxiv_id":"2607.00362","last_updated":"2026-07-01T03:00:30Z","snapshot_observed_at":"2026-07-07T00:06:03.968882Z","submitted_at":"2026-07-01T03:00:30Z","title":"SoK: Attack and Defense Landscape of Mobile On-device AI Systems","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-07-02T11:45:33.273144Z"},"links":{"citing_paper":"/paper/2607.00362"},"observation_digest":"sha256:706510ed599928fc29e1b1f69838eafd5c24449a44d9a1c17d7f5da0294eb9e4","observation_id":"bac75a12-9436-4f5c-b42b-771b32498afd","resolution":{"observed_at":"2026-07-06T02:51:52.411027Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-06T02:51:52.485327Z","title":"Darknetz: towards model privacy at the edge using trusted execution environments","venue":null,"work_id":"a5a0a8a0-ed68-44a7-80ca-21a0a4b5a410","year":2020},"citing_paper":{"arxiv_id":"2607.00362","last_updated":"2026-07-01T03:00:30Z","snapshot_observed_at":"2026-07-07T00:06:03.968882Z","submitted_at":"2026-07-01T03:00:30Z","title":"SoK: Attack and Defense Landscape of Mobile On-device AI Systems","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-07-02T11:45:33.273144Z"},"links":{"citing_paper":"/paper/2607.00362"},"observation_digest":"sha256:ccb5274c203de57e284a0c7fe5ee67dbcd8605c1b58a1440eadc01a7a007a81e","observation_id":"46c223d5-0ead-4b35-9106-3adaa5e371d7","resolution":{"observed_at":"2026-07-06T02:51:52.486497Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-06T02:51:52.533809Z","title":"A novel obfuscation method based on majority logic for preventing unauthorized access to binary deep neural networks","venue":null,"work_id":"d5201b20-8f33-41a1-8509-af93fb9f4879","year":2025},"citing_paper":{"arxiv_id":"2607.00362","last_updated":"2026-07-01T03:00:30Z","snapshot_observed_at":"2026-07-07T00:06:03.968882Z","submitted_at":"2026-07-01T03:00:30Z","title":"SoK: Attack and Defense Landscape of Mobile On-device AI Systems","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-07-02T11:45:33.273144Z"},"links":{"citing_paper":"/paper/2607.00362"},"observation_digest":"sha256:88d3bf4cf211359b82dfee70cd58b9be0cf2b357115a453aad2f22a56c6f59c9","observation_id":"b59ce579-b7d4-4a0e-bc4a-ea14444a3825","resolution":{"observed_at":"2026-07-06T02:51:52.535109Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-06T02:51:52.403235Z","title":"Asgard: Protecting on-device deep neural networks with virtualization-based trusted execution environments","venue":null,"work_id":"40b3f2ed-21b5-418b-901b-02ca205aec85","year":2025},"citing_paper":{"arxiv_id":"2607.00362","last_updated":"2026-07-01T03:00:30Z","snapshot_observed_at":"2026-07-07T00:06:03.968882Z","submitted_at":"2026-07-01T03:00:30Z","title":"SoK: Attack and Defense Landscape of Mobile On-device AI Systems","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-07-02T11:45:33.273144Z"},"links":{"citing_paper":"/paper/2607.00362"},"observation_digest":"sha256:daf13c0d90284e2a3f92660e88e3bb073dc11715466965b974523877cb6e542c","observation_id":"3d632b2e-4b6e-4922-a1ec-5acce60547c4","resolution":{"observed_at":"2026-07-06T02:51:52.404505Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-06T02:51:52.475119Z","title":"In33rd USENIX Security Symposium (USENIX Security 24), pages 5233–5250, 2024","venue":null,"work_id":"d38e5be6-f6e5-4b3d-8ca3-e458dd2103b0","year":2024},"citing_paper":{"arxiv_id":"2607.00362","last_updated":"2026-07-01T03:00:30Z","snapshot_observed_at":"2026-07-07T00:06:03.968882Z","submitted_at":"2026-07-01T03:00:30Z","title":"SoK: Attack and Defense Landscape of Mobile On-device AI Systems","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-07-02T11:45:33.273144Z"},"links":{"citing_paper":"/paper/2607.00362"},"observation_digest":"sha256:a0b7f787e1561cb83527a84dc6d6f562adaa1ed4fa870799e74c3ce3c22cd168","observation_id":"52d4bb52-e079-4f17-b3e7-6d936bf935eb","resolution":{"observed_at":"2026-07-06T02:51:52.476412Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-06T02:51:52.461793Z","title":"Demistify: Identifying on- device machine learning models stealing and reuse vulnerabilities in mobile apps","venue":null,"work_id":"b24ad590-1734-4b5d-ba09-0df3220d870f","year":2024},"citing_paper":{"arxiv_id":"2607.00362","last_updated":"2026-07-01T03:00:30Z","snapshot_observed_at":"2026-07-07T00:06:03.968882Z","submitted_at":"2026-07-01T03:00:30Z","title":"SoK: Attack and Defense Landscape of Mobile On-device AI Systems","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-07-02T11:45:33.273144Z"},"links":{"citing_paper":"/paper/2607.00362"},"observation_digest":"sha256:f3854699c7e77a95a17bf7fa69f412d39ba588cafe225919345d2ac0f1d1107c","observation_id":"91321b04-3c90-4de2-9c24-0e2a82d81873","resolution":{"observed_at":"2026-07-06T02:51:52.463135Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-06T02:51:52.492632Z","title":"Beyond the model: Data pre-processing attack to deep learning models in android apps","venue":null,"work_id":"ea3ce0d3-c1b2-499a-99e2-64b39e131527","year":2023},"citing_paper":{"arxiv_id":"2607.00362","last_updated":"2026-07-01T03:00:30Z","snapshot_observed_at":"2026-07-07T00:06:03.968882Z","submitted_at":"2026-07-01T03:00:30Z","title":"SoK: Attack and Defense Landscape of Mobile On-device AI Systems","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-07-02T11:45:33.273144Z"},"links":{"citing_paper":"/paper/2607.00362"},"observation_digest":"sha256:cf892de25e961d09563338e16bb939a407e3d2b5f8a950733049a42932cf3545","observation_id":"03678be1-38fe-44bf-89b1-1b4e87068819","resolution":{"observed_at":"2026-07-06T02:51:52.493760Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-06T02:51:52.509484Z","title":"Leap: Trustzone based developer-friendly tee for intelligent mobile apps.IEEE Transactions on Mobile Computing, 22(12):7138–7155, 2022","venue":null,"work_id":"3a03d8dc-6d51-4ce4-9ca7-258629956f40","year":2022},"citing_paper":{"arxiv_id":"2607.00362","last_updated":"2026-07-01T03:00:30Z","snapshot_observed_at":"2026-07-07T00:06:03.968882Z","submitted_at":"2026-07-01T03:00:30Z","title":"SoK: Attack and Defense Landscape of Mobile On-device AI Systems","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-07-02T11:45:33.273144Z"},"links":{"citing_paper":"/paper/2607.00362"},"observation_digest":"sha256:8cbea76df631968da9dd1008d3b6e6d74701185293dcc61078b0d9fd9165aa7b","observation_id":"055bb628-f7ea-46cb-9b7e-c1651351fc87","resolution":{"observed_at":"2026-07-06T02:51:52.526524Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-06T02:51:52.476758Z","title":"Tensorshield: Safeguarding on-device inference by shielding critical dnn tensors with tee","venue":null,"work_id":"50b49ce3-9de0-4a57-a909-498f647904d2","year":2025},"citing_paper":{"arxiv_id":"2607.00362","last_updated":"2026-07-01T03:00:30Z","snapshot_observed_at":"2026-07-07T00:06:03.968882Z","submitted_at":"2026-07-01T03:00:30Z","title":"SoK: Attack and Defense Landscape of Mobile On-device AI Systems","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-07-02T11:45:33.273144Z"},"links":{"citing_paper":"/paper/2607.00362"},"observation_digest":"sha256:9c9d4cbc3cc9026399ac7bdad5490c78296a13ad696d84c6a8e450239dcc568e","observation_id":"b7376a79-6ad9-4356-a4aa-6decd02d1131","resolution":{"observed_at":"2026-07-06T02:51:52.482517Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-06T02:51:52.488912Z","title":"Tsqp: Safeguarding real-time inference for quantization neural networks on edge devices","venue":null,"work_id":"fba5f80e-cefe-43e7-b4a1-4a14c2323ab7","year":2025},"citing_paper":{"arxiv_id":"2607.00362","last_updated":"2026-07-01T03:00:30Z","snapshot_observed_at":"2026-07-07T00:06:03.968882Z","submitted_at":"2026-07-01T03:00:30Z","title":"SoK: Attack and Defense Landscape of Mobile On-device AI Systems","version":1},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-07-02T11:45:33.273144Z"},"links":{"citing_paper":"/paper/2607.00362"},"observation_digest":"sha256:cd2134bdf389e24c33d15b614f1a82fe0e4d65894c6f70cf70d95ed39f2b096b","observation_id":"8924e178-e934-4442-aaec-870fcfb5100a","resolution":{"observed_at":"2026-07-06T02:51:52.490164Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-06T02:51:52.400462Z","title":"Shadownet: A secure and efficient on-device model inference system for convolutional neural networks","venue":null,"work_id":"010417d8-5a6b-4b8c-9889-a0507f8a5122","year":null},"citing_paper":{"arxiv_id":"2607.00362","last_updated":"2026-07-01T03:00:30Z","snapshot_observed_at":"2026-07-07T00:06:03.968882Z","submitted_at":"2026-07-01T03:00:30Z","title":"SoK: Attack and Defense Landscape of Mobile On-device AI Systems","version":1},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-07-02T11:45:33.273144Z"},"links":{"citing_paper":"/paper/2607.00362"},"observation_digest":"sha256:110f7edaa26071f7bbb1849adf38a601057db328e9360521e7e677ccf172675c","observation_id":"8573dc09-6941-4226-9013-b9097047d362","resolution":{"observed_at":"2026-07-06T02:51:52.402401Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-06T02:51:52.457089Z","title":"Mind your weight (s): A large-scale study on insufficient machine learning model protection in mobile apps","venue":null,"work_id":"675a6d08-cd0e-444a-98ad-7c3c42257a4d","year":1955},"citing_paper":{"arxiv_id":"2607.00362","last_updated":"2026-07-01T03:00:30Z","snapshot_observed_at":"2026-07-07T00:06:03.968882Z","submitted_at":"2026-07-01T03:00:30Z","title":"SoK: Attack and Defense Landscape of Mobile On-device AI Systems","version":1},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-07-02T11:45:33.273144Z"},"links":{"citing_paper":"/paper/2607.00362"},"observation_digest":"sha256:403cc30baec8920c60834e31af313b9cca3b225fda76f7b6582fbc3cb45a7ad1","observation_id":"89f6a1f3-ea98-4e56-8f2c-e6ab2b087e00","resolution":{"observed_at":"2026-07-06T02:51:52.458901Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-06T02:51:52.413746Z","title":"Game of arrows: On the ({In-) Security}of weight obfuscation for{On-Device}{TEE- Shielded}{LLM}partition algorithms","venue":null,"work_id":"eec88fba-19c3-4a53-9c40-3576070e4789","year":2025},"citing_paper":{"arxiv_id":"2607.00362","last_updated":"2026-07-01T03:00:30Z","snapshot_observed_at":"2026-07-07T00:06:03.968882Z","submitted_at":"2026-07-01T03:00:30Z","title":"SoK: Attack and Defense Landscape of Mobile On-device AI Systems","version":1},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-07-02T11:45:33.273144Z"},"links":{"citing_paper":"/paper/2607.00362"},"observation_digest":"sha256:aa87db614eed3bc345b5d4c235f70a613a471e10cf3cbaa52036805d7ec5db0d","observation_id":"0afee317-d47a-4fd6-a7eb-e47d3405e701","resolution":{"observed_at":"2026-07-06T02:51:52.415225Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-06T02:51:52.449765Z","title":"Tz-llm: Protecting on-device large language models with arm trustzone","venue":null,"work_id":"42f0e3a6-b360-49c3-b208-d101c9072092","year":2026},"citing_paper":{"arxiv_id":"2607.00362","last_updated":"2026-07-01T03:00:30Z","snapshot_observed_at":"2026-07-07T00:06:03.968882Z","submitted_at":"2026-07-01T03:00:30Z","title":"SoK: Attack and Defense Landscape of Mobile On-device AI Systems","version":1},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-07-02T11:45:33.273144Z"},"links":{"citing_paper":"/paper/2607.00362"},"observation_digest":"sha256:41d972a6243fde17936b9ea169d42d6026ace4d96f1f0ab914d0bf99eb9933dd","observation_id":"9b359fc9-c706-4439-9ff8-f1decc48e5ba","resolution":{"observed_at":"2026-07-06T02:51:52.451291Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-06T02:51:52.505800Z","title":"Energy- latency attacks to on-device neural networks via sponge poisoning","venue":null,"work_id":"131d6390-7edc-4a25-8a43-09f7187d877f","year":2023},"citing_paper":{"arxiv_id":"2607.00362","last_updated":"2026-07-01T03:00:30Z","snapshot_observed_at":"2026-07-07T00:06:03.968882Z","submitted_at":"2026-07-01T03:00:30Z","title":"SoK: Attack and Defense Landscape of Mobile On-device AI Systems","version":1},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-07-02T11:45:33.273144Z"},"links":{"citing_paper":"/paper/2607.00362"},"observation_digest":"sha256:c764deb0de28f307fb77813a70720e6bbfc5a41c6f9f5463711f46a7d0c5b93e","observation_id":"8720f3b8-436b-439e-8d17-b7ebac0cd760","resolution":{"observed_at":"2026-07-06T02:51:52.507103Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2501.01263","last_updated":"2025-01-02T13:58:05Z","snapshot_observed_at":"2026-08-13T14:30:33.857185Z","submitted_at":"2025-01-02T13:58:05Z","title":"Stealthy Backdoor Attack to Real-world Models in Android Apps","version":1},"cited_work":{"arxiv_id":"2501.01263","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2501.01263","snapshot_observed_at":"2026-07-02T11:46:54.738438Z","title":"Stealthy backdoor attack to real-world models in android apps.arXiv preprint arXiv:2501.01263, 2025","venue":null,"work_id":"43518ee5-b6a8-4979-a2ec-61337e96b7c6","year":2025},"citing_paper":{"arxiv_id":"2607.00362","last_updated":"2026-07-01T03:00:30Z","snapshot_observed_at":"2026-07-07T00:06:03.968882Z","submitted_at":"2026-07-01T03:00:30Z","title":"SoK: Attack and Defense Landscape of Mobile On-device AI Systems","version":1},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-07-02T11:45:33.273144Z"},"links":{"cited_paper":"/paper/2501.01263","citing_paper":"/paper/2607.00362"},"observation_digest":"sha256:5da55c2308bbc33b2a85c17f689bf42dd240813aafabe41fbf0dd0236eaf82e3","observation_id":"4e99cfdb-600b-4cbb-ad54-b7e694a6789e","resolution":{"observed_at":"2026-07-02T11:46:54.740085Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.05349","last_updated":"2024-10-07T10:52:53Z","snapshot_observed_at":"2026-08-16T13:11:58.392739Z","submitted_at":"2024-10-07T10:52:53Z","title":"SoK: Towards Security and Safety of Edge AI","version":1},"cited_work":{"arxiv_id":"2410.05349","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2410.05349","snapshot_observed_at":"2026-07-02T11:46:54.730597Z","title":"Sok: towards security and safety of edge ai.arXiv preprint arXiv:2410.05349, 2024","venue":null,"work_id":"d12babfb-797e-4d69-80b0-ab056d9bb260","year":2024},"citing_paper":{"arxiv_id":"2607.00362","last_updated":"2026-07-01T03:00:30Z","snapshot_observed_at":"2026-07-07T00:06:03.968882Z","submitted_at":"2026-07-01T03:00:30Z","title":"SoK: Attack and Defense Landscape of Mobile On-device AI Systems","version":1},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-07-02T11:45:33.273144Z"},"links":{"cited_paper":"/paper/2410.05349","citing_paper":"/paper/2607.00362"},"observation_digest":"sha256:1a931def4917f777c1eb980dff57d85912726d720d4dcf19ceca1d89b438bbf8","observation_id":"4091fec3-23fd-4c94-b3b5-89812c2d3089","resolution":{"observed_at":"2026-07-02T11:46:54.732160Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-06T02:51:52.503853Z","title":"Tim: Enabling large-scale white- box testing on in-app deep learning models.IEEE Transactions on Information Forensics and Security, 19:8188–8203, 2024","venue":null,"work_id":"13e61afd-9707-4b5c-8b29-4431efbcb83e","year":2024},"citing_paper":{"arxiv_id":"2607.00362","last_updated":"2026-07-01T03:00:30Z","snapshot_observed_at":"2026-07-07T00:06:03.968882Z","submitted_at":"2026-07-01T03:00:30Z","title":"SoK: Attack and Defense Landscape of Mobile On-device AI Systems","version":1},"reference_index":58,"source":"pdf_text","source_observed_at":"2026-07-02T11:45:33.273144Z"},"links":{"citing_paper":"/paper/2607.00362"},"observation_digest":"sha256:cd707d6e2d7c08521796fcdbfe8968c29a5df14786a55e6d58e0d65daa134197","observation_id":"c9a36fdb-0449-4647-9b96-f2738a63cb46","resolution":{"observed_at":"2026-07-06T02:51:52.505204Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2603.09046","last_updated":"2026-07-01T17:06:07Z","snapshot_observed_at":"2026-08-15T00:33:57.336764Z","submitted_at":"2026-03-10T00:31:25Z","title":"FlexServe: A Fast and Secure LLM Serving System for Mobile Devices with Flexible Resource Isolation","version":3},"cited_work":{"arxiv_id":"2603.09046","doi":null,"metadata_source":"pith","pith_arxiv_id":"2603.09046","snapshot_observed_at":"2026-07-02T11:46:54.733385Z","title":"FlexServe: A Fast and Secure LLM Serving System for Mobile Devices with Flexible Resource Isolation","venue":"cs.CR","work_id":"0e651cc4-1365-4aa0-940c-bc5c201b98b9","year":2026},"citing_paper":{"arxiv_id":"2607.00362","last_updated":"2026-07-01T03:00:30Z","snapshot_observed_at":"2026-07-07T00:06:03.968882Z","submitted_at":"2026-07-01T03:00:30Z","title":"SoK: Attack and Defense Landscape of Mobile On-device AI Systems","version":1},"reference_index":59,"source":"pdf_text","source_observed_at":"2026-07-02T11:45:33.273144Z"},"links":{"cited_paper":"/paper/2603.09046","citing_paper":"/paper/2607.00362"},"observation_digest":"sha256:884c71de86a189a0e05e4d644cb04736d127e6f6648bc230dd64a4b820f59560","observation_id":"24ae92dc-f483-42e7-b833-653c679c6927","resolution":{"observed_at":"2026-07-02T11:46:54.734607Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-06T02:51:52.495867Z","title":"A first look at deep learning apps on smartphones","venue":null,"work_id":"508adf1a-cf04-405c-8082-278dc992a6f8","year":2019},"citing_paper":{"arxiv_id":"2607.00362","last_updated":"2026-07-01T03:00:30Z","snapshot_observed_at":"2026-07-07T00:06:03.968882Z","submitted_at":"2026-07-01T03:00:30Z","title":"SoK: Attack and Defense Landscape of Mobile On-device AI Systems","version":1},"reference_index":60,"source":"pdf_text","source_observed_at":"2026-07-02T11:45:33.273144Z"},"links":{"citing_paper":"/paper/2607.00362"},"observation_digest":"sha256:7da18836a7c39b67353cec310c990609ad479e5ac3b611b16990222a01194c6f","observation_id":"4f135295-bff4-435b-a1f1-02c1e8627754","resolution":{"observed_at":"2026-07-06T02:51:52.497054Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-06T02:51:52.468627Z","title":"Groupcover: A secure, efficient and scalable inference framework for on-device model protection based on tees","venue":null,"work_id":"731352cc-dfce-4de1-b880-effe6d4ff6b0","year":2024},"citing_paper":{"arxiv_id":"2607.00362","last_updated":"2026-07-01T03:00:30Z","snapshot_observed_at":"2026-07-07T00:06:03.968882Z","submitted_at":"2026-07-01T03:00:30Z","title":"SoK: Attack and Defense Landscape of Mobile On-device AI Systems","version":1},"reference_index":61,"source":"pdf_text","source_observed_at":"2026-07-02T11:45:33.273144Z"},"links":{"citing_paper":"/paper/2607.00362"},"observation_digest":"sha256:2d3fd08d0bf8f0bb83a4b906e370877ffc28b665b6c9f2e29832dd9af7083eaa","observation_id":"c163e46f-310e-4f80-b45c-64e684844620","resolution":{"observed_at":"2026-07-06T02:51:52.470026Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-06T02:51:52.456741Z","title":"No privacy left outside: On the (in-) security of tee-shielded dnn partition for on-device ml","venue":null,"work_id":"b66850bd-a762-4fa3-b7d2-3db2c7d38399","year":2024},"citing_paper":{"arxiv_id":"2607.00362","last_updated":"2026-07-01T03:00:30Z","snapshot_observed_at":"2026-07-07T00:06:03.968882Z","submitted_at":"2026-07-01T03:00:30Z","title":"SoK: Attack and Defense Landscape of Mobile On-device AI Systems","version":1},"reference_index":62,"source":"pdf_text","source_observed_at":"2026-07-02T11:45:33.273144Z"},"links":{"citing_paper":"/paper/2607.00362"},"observation_digest":"sha256:db42141ed03a243e8ce27b7c80d1b15f47eda9ac1c4802872c5be16833df06f5","observation_id":"7b42aa7a-cde4-422d-aff3-6621aaa975ba","resolution":{"observed_at":"2026-07-06T02:51:52.458216Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2601.13826","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-02T11:46:54.735747Z","title":"Miragenet: A secure, efficient, and scalable on-device model protection in heterogeneous tee and gpu system.arXiv preprint arXiv:2601.13826, 2026","venue":null,"work_id":"098b346a-c971-46ce-8e4f-f3d562389398","year":2026},"citing_paper":{"arxiv_id":"2607.00362","last_updated":"2026-07-01T03:00:30Z","snapshot_observed_at":"2026-07-07T00:06:03.968882Z","submitted_at":"2026-07-01T03:00:30Z","title":"SoK: Attack and Defense Landscape of Mobile On-device AI Systems","version":1},"reference_index":63,"source":"pdf_text","source_observed_at":"2026-07-02T11:45:33.273144Z"},"links":{"citing_paper":"/paper/2607.00362"},"observation_digest":"sha256:78a5e547ca6a9010628864d47dc6479abf31a09bb8745831cb871a880f24cbb2","observation_id":"a609b582-b9d6-4042-96b0-abd5fac9a816","resolution":{"observed_at":"2026-07-02T11:46:54.737344Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-06T02:51:52.470985Z","title":"Dynamo: Protecting mobile dl models through coupling obfuscated dl operators","venue":null,"work_id":"ed7c135f-f066-4c02-82e9-9a920887adc1","year":2024},"citing_paper":{"arxiv_id":"2607.00362","last_updated":"2026-07-01T03:00:30Z","snapshot_observed_at":"2026-07-07T00:06:03.968882Z","submitted_at":"2026-07-01T03:00:30Z","title":"SoK: Attack and Defense Landscape of Mobile On-device AI Systems","version":1},"reference_index":64,"source":"pdf_text","source_observed_at":"2026-07-02T11:45:33.273144Z"},"links":{"citing_paper":"/paper/2607.00362"},"observation_digest":"sha256:8d969a3aae60c0fd5f3ff2b60679c9eda221e43f2d2792368e7b8ea05c2a51b1","observation_id":"9f0c7e26-bbaa-4a2a-9f66-ffee9436c9d2","resolution":{"observed_at":"2026-07-06T02:51:52.472474Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-06T02:51:52.442028Z","title":"Model-less is the best model: Generating pure code implementations to replace on-device dl models","venue":null,"work_id":"a394ec28-08f0-4027-9baf-b929e09c4795","year":2024},"citing_paper":{"arxiv_id":"2607.00362","last_updated":"2026-07-01T03:00:30Z","snapshot_observed_at":"2026-07-07T00:06:03.968882Z","submitted_at":"2026-07-01T03:00:30Z","title":"SoK: Attack and Defense Landscape of Mobile On-device AI Systems","version":1},"reference_index":65,"source":"pdf_text","source_observed_at":"2026-07-02T11:45:33.273144Z"},"links":{"citing_paper":"/paper/2607.00362"},"observation_digest":"sha256:757e40bede76bcb20468ac614f87b57b281d9ef1dab2be0cf2f3b0fcfddef493","observation_id":"d5635e1e-c166-4c25-8f41-9c03f3f629b8","resolution":{"observed_at":"2026-07-06T02:51:52.443680Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-06T02:51:52.494331Z","title":"Modelobfuscator: Obfuscating model information to protect deployed ml-based systems","venue":null,"work_id":"e17af9c2-209c-48f5-ae43-35214ef4c5a4","year":2023},"citing_paper":{"arxiv_id":"2607.00362","last_updated":"2026-07-01T03:00:30Z","snapshot_observed_at":"2026-07-07T00:06:03.968882Z","submitted_at":"2026-07-01T03:00:30Z","title":"SoK: Attack and Defense Landscape of Mobile On-device AI Systems","version":1},"reference_index":66,"source":"pdf_text","source_observed_at":"2026-07-02T11:45:33.273144Z"},"links":{"citing_paper":"/paper/2607.00362"},"observation_digest":"sha256:8d3145a70044e90ea988d578ef70131f17db81eef1f21cadae681d7ffca51610","observation_id":"3ec70fa4-8fb1-45ec-b88f-14ff5b1cbdbf","resolution":{"observed_at":"2026-07-06T02:51:52.495548Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-06T02:51:52.439835Z","title":"Investigating white-box attacks for on-device models","venue":null,"work_id":"0b4d4567-0fb7-45c8-b384-beced9066a73","year":2024},"citing_paper":{"arxiv_id":"2607.00362","last_updated":"2026-07-01T03:00:30Z","snapshot_observed_at":"2026-07-07T00:06:03.968882Z","submitted_at":"2026-07-01T03:00:30Z","title":"SoK: Attack and Defense Landscape of Mobile On-device AI Systems","version":1},"reference_index":67,"source":"pdf_text","source_observed_at":"2026-07-02T11:45:33.273144Z"},"links":{"citing_paper":"/paper/2607.00362"},"observation_digest":"sha256:d6742728502b1eaae22c9e6e52428d78b38226e2e9b86708878c4d94c603a25d","observation_id":"a40bea54-c209-48c5-83f9-1a21eb312165","resolution":{"observed_at":"2026-07-06T02:51:52.441239Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-06T02:51:52.431747Z","title":"Nnsplitter: an active defense solution for dnn model via automated weight obfuscation","venue":null,"work_id":"6b186c2f-721e-44a9-9417-be819168ae75","year":2023},"citing_paper":{"arxiv_id":"2607.00362","last_updated":"2026-07-01T03:00:30Z","snapshot_observed_at":"2026-07-07T00:06:03.968882Z","submitted_at":"2026-07-01T03:00:30Z","title":"SoK: Attack and Defense Landscape of Mobile On-device AI Systems","version":1},"reference_index":68,"source":"pdf_text","source_observed_at":"2026-07-02T11:45:33.273144Z"},"links":{"citing_paper":"/paper/2607.00362"},"observation_digest":"sha256:9be21bef2551be5d797b6bdb3a325501b9bf2857c706f41880296c856843b923","observation_id":"ed4f6995-52da-407e-a092-47c0bdef3c18","resolution":{"observed_at":"2026-07-06T02:51:52.433040Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2607.00362","last_updated":"2026-07-01T03:00:30Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-07-07T00:06:03.968882Z","submitted_at":"2026-07-01T03:00:30Z","title":"SoK: Attack and Defense Landscape of Mobile On-device AI Systems"},"reference_resolution":{"displayed":68,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":1,"verified_exact":5,"verified_fuzzy":62},"total_outbound_references":68},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"thesis":"As of 18 August 2026, this Paper Citation Record lists 68 of 68 outbound references and 0 inbound Pith citation observations for arXiv:2607.00362."}