{"as_of":"2026-08-09T13:11:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:255888d34946901fddbd767cbd12bcf35b6e105dad2f3f043d47051dc2cd7ddc","coverage":[{"denominator":73,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":73,"source":"paper_references, paper_reference_links","source_observed_at":"2026-07-13T02:46:49.236604Z","state":"measured"},{"denominator":73,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":73,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-09T06:31:02.800959+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2607.09473/citation-record","integrity":"/paper/2607.09473/integrity","json":"/paper/2607.09473/citation-record.json","paper":"/paper/2607.09473"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-13T02:46:49.236604Z","title":"Empowering edge intelligence: A comprehensive survey on on- device AI models,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.09473","last_updated":"2026-07-10T14:44:32Z","snapshot_observed_at":"2026-08-09T12:37:27.948833Z","submitted_at":"2026-07-10T14:44:32Z","title":"Triggering Stealthy Feature Map Backdoors via Physical Fault Injection in Embedded Neural Networks","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-07-13T02:46:49.236604Z"},"links":{"citing_paper":"/paper/2607.09473"},"observation_digest":"sha256:b33e4573d5d77673daa05c412372165f4f264b3d95b77067218ef644372d8ebd","observation_id":"f1db009c-5572-45f3-87b8-194272d81158","resolution":{"observed_at":"2026-07-13T02:46:49.236604Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-13T02:46:49.236604Z","title":"Fault injection attack on deep neural network,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2607.09473","last_updated":"2026-07-10T14:44:32Z","snapshot_observed_at":"2026-08-09T12:37:27.948833Z","submitted_at":"2026-07-10T14:44:32Z","title":"Triggering Stealthy Feature Map Backdoors via Physical Fault Injection in Embedded Neural Networks","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-07-13T02:46:49.236604Z"},"links":{"citing_paper":"/paper/2607.09473"},"observation_digest":"sha256:c5611fd632591754da63418d7abac050b72277a51365199d4f06cc075be8b6f8","observation_id":"07fd5ae6-719c-48b6-aa71-38a45a4237da","resolution":{"observed_at":"2026-07-13T02:46:49.236604Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-13T02:46:49.236604Z","title":"On the importance of checking cryptographic protocols for faults,","venue":null,"work_id":null,"year":1997},"citing_paper":{"arxiv_id":"2607.09473","last_updated":"2026-07-10T14:44:32Z","snapshot_observed_at":"2026-08-09T12:37:27.948833Z","submitted_at":"2026-07-10T14:44:32Z","title":"Triggering Stealthy Feature Map Backdoors via Physical Fault Injection in Embedded Neural Networks","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-07-13T02:46:49.236604Z"},"links":{"citing_paper":"/paper/2607.09473"},"observation_digest":"sha256:3ca97b912694c40334aef6ffc4c22ab7bb11c4ddb197bd3e4bb1f118f80cb66a","observation_id":"7875d2bf-ecd2-455e-999a-258f40c82cb0","resolution":{"observed_at":"2026-07-13T02:46:49.236604Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-13T02:46:49.236604Z","title":"Differential fault analysis of secret key cryptosystems,","venue":null,"work_id":null,"year":1997},"citing_paper":{"arxiv_id":"2607.09473","last_updated":"2026-07-10T14:44:32Z","snapshot_observed_at":"2026-08-09T12:37:27.948833Z","submitted_at":"2026-07-10T14:44:32Z","title":"Triggering Stealthy Feature Map Backdoors via Physical Fault Injection in Embedded Neural Networks","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-07-13T02:46:49.236604Z"},"links":{"citing_paper":"/paper/2607.09473"},"observation_digest":"sha256:217d625cc48e6f4a43a5250dce0fc5a142cd6855fe81162aa651b902758b02de","observation_id":"6fa61bfd-702d-4818-9617-bdfa532e12e1","resolution":{"observed_at":"2026-07-13T02:46:49.236604Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-13T02:46:49.236604Z","title":"DFA on AES,","venue":null,"work_id":null,"year":2004},"citing_paper":{"arxiv_id":"2607.09473","last_updated":"2026-07-10T14:44:32Z","snapshot_observed_at":"2026-08-09T12:37:27.948833Z","submitted_at":"2026-07-10T14:44:32Z","title":"Triggering Stealthy Feature Map Backdoors via Physical Fault Injection in Embedded Neural Networks","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-07-13T02:46:49.236604Z"},"links":{"citing_paper":"/paper/2607.09473"},"observation_digest":"sha256:067d3d1649b1fdc9bd288e89422d7dd14251293c4db96d221530b0c71f77870e","observation_id":"4c3c2248-a460-49bc-b004-4c0a9c6ed09b","resolution":{"observed_at":"2026-07-13T02:46:49.236604Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-13T02:46:49.236604Z","title":"CLKSCREW: exposing the perils of security-oblivious energy management,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2607.09473","last_updated":"2026-07-10T14:44:32Z","snapshot_observed_at":"2026-08-09T12:37:27.948833Z","submitted_at":"2026-07-10T14:44:32Z","title":"Triggering Stealthy Feature Map Backdoors via Physical Fault Injection in Embedded Neural Networks","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-07-13T02:46:49.236604Z"},"links":{"citing_paper":"/paper/2607.09473"},"observation_digest":"sha256:bfb18715165e3c0269ff67ba4acc0977e7f01c800b477623fd73b7f4599ff9ba","observation_id":"2e45c4ea-d458-4c01-aa09-b56a40d5d0f7","resolution":{"observed_at":"2026-07-13T02:46:49.236604Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-13T02:46:49.236604Z","title":"Escalating privileges in linux using voltage fault injection,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2607.09473","last_updated":"2026-07-10T14:44:32Z","snapshot_observed_at":"2026-08-09T12:37:27.948833Z","submitted_at":"2026-07-10T14:44:32Z","title":"Triggering Stealthy Feature Map Backdoors via Physical Fault Injection in Embedded Neural Networks","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-07-13T02:46:49.236604Z"},"links":{"citing_paper":"/paper/2607.09473"},"observation_digest":"sha256:52cab0cd87f94ac7d81c651ab1e2331bdcbb970aec71eb897157976411c0cccd","observation_id":"408be99b-a9bd-43e1-ae21-3e71e4b557cf","resolution":{"observed_at":"2026-07-13T02:46:49.236604Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-13T02:46:49.236604Z","title":"V oltPillager: Hardware-based fault injection attacks against intel SGX enclaves using the SVID voltage scaling interface,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2607.09473","last_updated":"2026-07-10T14:44:32Z","snapshot_observed_at":"2026-08-09T12:37:27.948833Z","submitted_at":"2026-07-10T14:44:32Z","title":"Triggering Stealthy Feature Map Backdoors via Physical Fault Injection in Embedded Neural Networks","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-07-13T02:46:49.236604Z"},"links":{"citing_paper":"/paper/2607.09473"},"observation_digest":"sha256:63069458a2de1953684c01ec6054c07533ea74d149c3aea72ba242d6af1a897a","observation_id":"2223898d-0573-4fdd-9d33-a2d59f2916b2","resolution":{"observed_at":"2026-07-13T02:46:49.236604Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-13T02:46:49.236604Z","title":"Plundervolt: How a little bit of undervolting can create a lot of trouble,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2607.09473","last_updated":"2026-07-10T14:44:32Z","snapshot_observed_at":"2026-08-09T12:37:27.948833Z","submitted_at":"2026-07-10T14:44:32Z","title":"Triggering Stealthy Feature Map Backdoors via Physical Fault Injection in Embedded Neural Networks","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-07-13T02:46:49.236604Z"},"links":{"citing_paper":"/paper/2607.09473"},"observation_digest":"sha256:5dbeb8a9a6c80c2be879e82fbf9cf0c36d3559975c1583ff192668d50dd60277","observation_id":"8c71d267-2d86-4d1e-aa5a-e6a09f5f286d","resolution":{"observed_at":"2026-07-13T02:46:49.236604Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-13T02:46:49.236604Z","title":"Faulty point unit: Abi poisoning attacks on intel sgx,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2607.09473","last_updated":"2026-07-10T14:44:32Z","snapshot_observed_at":"2026-08-09T12:37:27.948833Z","submitted_at":"2026-07-10T14:44:32Z","title":"Triggering Stealthy Feature Map Backdoors via Physical Fault Injection in Embedded Neural Networks","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-07-13T02:46:49.236604Z"},"links":{"citing_paper":"/paper/2607.09473"},"observation_digest":"sha256:132b75a15303af8066422a83788dc1b63edce30a7ffb3e5b7c7e5dd532384f82","observation_id":"fc9823c8-ba02-4f17-8c6d-fdb959487154","resolution":{"observed_at":"2026-07-13T02:46:49.236604Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-13T02:46:49.236604Z","title":"Oops..! I glitched it again! how to Multi-Glitch the Glitching-Protections on ARM TrustZone- M,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.09473","last_updated":"2026-07-10T14:44:32Z","snapshot_observed_at":"2026-08-09T12:37:27.948833Z","submitted_at":"2026-07-10T14:44:32Z","title":"Triggering Stealthy Feature Map Backdoors via Physical Fault Injection in Embedded Neural Networks","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-07-13T02:46:49.236604Z"},"links":{"citing_paper":"/paper/2607.09473"},"observation_digest":"sha256:37ba74adc50e9f8a862d257ec6a38fbf5e61e7d224983b26cb89fe79819e342c","observation_id":"e758c404-e761-4bf6-afad-e9850f7ccc2d","resolution":{"observed_at":"2026-07-13T02:46:49.236604Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1806.05859","last_updated":"2018-09-29T12:23:34Z","snapshot_observed_at":"2026-08-07T10:25:17.219724Z","submitted_at":"2018-06-15T08:44:26Z","title":"DeepLaser: Practical Fault Attack on Deep Neural Networks","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1806.05859","snapshot_observed_at":"2026-07-13T02:46:49.236604Z","title":"Deeplaser: Practical fault attack on deep neural networks,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2607.09473","last_updated":"2026-07-10T14:44:32Z","snapshot_observed_at":"2026-08-09T12:37:27.948833Z","submitted_at":"2026-07-10T14:44:32Z","title":"Triggering Stealthy Feature Map Backdoors via Physical Fault Injection in Embedded Neural Networks","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-07-13T02:46:49.236604Z"},"links":{"cited_paper":"/paper/1806.05859","citing_paper":"/paper/2607.09473"},"observation_digest":"sha256:49a2d0eccedcd02881fc5bf085469e90e560215af23f734405f49dbd94f9fa06","observation_id":"3b8901c7-1df1-482c-a033-ccbb923dd0d0","resolution":{"observed_at":"2026-07-13T02:46:49.236604Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-13T02:46:49.236604Z","title":"Fault injection on embedded neural networks: Impact of a single instruction skip,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.09473","last_updated":"2026-07-10T14:44:32Z","snapshot_observed_at":"2026-08-09T12:37:27.948833Z","submitted_at":"2026-07-10T14:44:32Z","title":"Triggering Stealthy Feature Map Backdoors via Physical Fault Injection in Embedded Neural Networks","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-07-13T02:46:49.236604Z"},"links":{"citing_paper":"/paper/2607.09473"},"observation_digest":"sha256:be813d40d704163252db77d496ec059b192dc03e26aa9a19946826736dbc89a6","observation_id":"3d8d9bc6-2f20-49be-bd0f-e1994c39f394","resolution":{"observed_at":"2026-07-13T02:46:49.236604Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-13T02:46:49.236604Z","title":"Fault injection attacks utilizing waveform pattern matching against neural networks processing on mi- crocontroller,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2607.09473","last_updated":"2026-07-10T14:44:32Z","snapshot_observed_at":"2026-08-09T12:37:27.948833Z","submitted_at":"2026-07-10T14:44:32Z","title":"Triggering Stealthy Feature Map Backdoors via Physical Fault Injection in Embedded Neural Networks","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-07-13T02:46:49.236604Z"},"links":{"citing_paper":"/paper/2607.09473"},"observation_digest":"sha256:5d5304034dcffad909a5a4fe5f6e06834a7fc39500c40495575553974d1be55e","observation_id":"8a1e4d5f-b788-468f-903f-50425de51fae","resolution":{"observed_at":"2026-07-13T02:46:49.236604Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-13T02:46:49.236604Z","title":"TFL: Targeted bit-flip attack on large language model,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.09473","last_updated":"2026-07-10T14:44:32Z","snapshot_observed_at":"2026-08-09T12:37:27.948833Z","submitted_at":"2026-07-10T14:44:32Z","title":"Triggering Stealthy Feature Map Backdoors via Physical Fault Injection in Embedded Neural Networks","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-07-13T02:46:49.236604Z"},"links":{"citing_paper":"/paper/2607.09473"},"observation_digest":"sha256:b23259db56574d5fb0873695eb7f6868e1c91e712a5c47b42f6491f8beb8a69e","observation_id":"c40e839f-368c-4ad1-ae34-eacb2b70b671","resolution":{"observed_at":"2026-07-13T02:46:49.236604Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-13T02:46:49.236604Z","title":"How vulnerable are large language models (LLMs) against adversarial bit- flip attacks?","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.09473","last_updated":"2026-07-10T14:44:32Z","snapshot_observed_at":"2026-08-09T12:37:27.948833Z","submitted_at":"2026-07-10T14:44:32Z","title":"Triggering Stealthy Feature Map Backdoors via Physical Fault Injection in Embedded Neural Networks","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-07-13T02:46:49.236604Z"},"links":{"citing_paper":"/paper/2607.09473"},"observation_digest":"sha256:ae789518cb2867326c3301151fa4b93a91c6ac9c7ec33ea8509e09e320fe383b","observation_id":"aa513adf-a301-4092-83ee-ad178b18c38e","resolution":{"observed_at":"2026-07-13T02:46:49.236604Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-13T02:46:49.236604Z","title":"TBT: Targeted neural network attack with bit trojan,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2607.09473","last_updated":"2026-07-10T14:44:32Z","snapshot_observed_at":"2026-08-09T12:37:27.948833Z","submitted_at":"2026-07-10T14:44:32Z","title":"Triggering Stealthy Feature Map Backdoors via Physical Fault Injection in Embedded Neural Networks","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-07-13T02:46:49.236604Z"},"links":{"citing_paper":"/paper/2607.09473"},"observation_digest":"sha256:be312e254d5d0c680ec8771d76af579b32a01ab7527df70b027f0f98f42a2bc4","observation_id":"366c88a9-f332-42b8-98e0-6bf8790dfcab","resolution":{"observed_at":"2026-07-13T02:46:49.236604Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-13T02:46:49.236604Z","title":"Physical security of deep learning on edge devices: Comprehensive evaluation of fault injection attack vectors,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2607.09473","last_updated":"2026-07-10T14:44:32Z","snapshot_observed_at":"2026-08-09T12:37:27.948833Z","submitted_at":"2026-07-10T14:44:32Z","title":"Triggering Stealthy Feature Map Backdoors via Physical Fault Injection in Embedded Neural Networks","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-07-13T02:46:49.236604Z"},"links":{"citing_paper":"/paper/2607.09473"},"observation_digest":"sha256:ec306ed39949e22ce21eb07b0529c8784f32ccba83f4524746824ebd5279ff01","observation_id":"27f89592-ddbb-42e8-aac4-918ef4a9222a","resolution":{"observed_at":"2026-07-13T02:46:49.236604Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-13T02:46:49.236604Z","title":"Investigation of em fault injection on emerging lightweight neural network hardware,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.09473","last_updated":"2026-07-10T14:44:32Z","snapshot_observed_at":"2026-08-09T12:37:27.948833Z","submitted_at":"2026-07-10T14:44:32Z","title":"Triggering Stealthy Feature Map Backdoors via Physical Fault Injection in Embedded Neural Networks","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-07-13T02:46:49.236604Z"},"links":{"citing_paper":"/paper/2607.09473"},"observation_digest":"sha256:503d421c7e84412ae881e2457ff6b0522a6902631b2e941b7058ab5a09d02c7e","observation_id":"b5c6bbb7-9167-440e-9eb9-f1548e497a79","resolution":{"observed_at":"2026-07-13T02:46:49.236604Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-13T02:46:49.236604Z","title":"Rowhammer-based trojan injection: One bit flip is sufficient for backdooring DNNs,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.09473","last_updated":"2026-07-10T14:44:32Z","snapshot_observed_at":"2026-08-09T12:37:27.948833Z","submitted_at":"2026-07-10T14:44:32Z","title":"Triggering Stealthy Feature Map Backdoors via Physical Fault Injection in Embedded Neural Networks","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-07-13T02:46:49.236604Z"},"links":{"citing_paper":"/paper/2607.09473"},"observation_digest":"sha256:b9d738ef91ff423a02a8dd1b1e5acbf1221f5cc32ed59e8049e2103c14a75e33","observation_id":"e2e4c6c8-0451-4da2-9411-b977b2e4b1ce","resolution":{"observed_at":"2026-07-13T02:46:49.236604Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-13T02:46:49.236604Z","title":"Backdoor attacks on neural networks via one-bit flip,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.09473","last_updated":"2026-07-10T14:44:32Z","snapshot_observed_at":"2026-08-09T12:37:27.948833Z","submitted_at":"2026-07-10T14:44:32Z","title":"Triggering Stealthy Feature Map Backdoors via Physical Fault Injection in Embedded Neural Networks","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-07-13T02:46:49.236604Z"},"links":{"citing_paper":"/paper/2607.09473"},"observation_digest":"sha256:908ecb638698d2fb85cfb60774b2cc7f8af3ec7b8023328eb25b23a10acf3737","observation_id":"d7aab5e6-fe6f-45ff-b607-ec6913b97afb","resolution":{"observed_at":"2026-07-13T02:46:49.236604Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-13T02:46:49.236604Z","title":"Security evaluation of deep neural network resistance against laser fault in- jection,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2607.09473","last_updated":"2026-07-10T14:44:32Z","snapshot_observed_at":"2026-08-09T12:37:27.948833Z","submitted_at":"2026-07-10T14:44:32Z","title":"Triggering Stealthy Feature Map Backdoors via Physical Fault Injection in Embedded Neural Networks","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-07-13T02:46:49.236604Z"},"links":{"citing_paper":"/paper/2607.09473"},"observation_digest":"sha256:f78207754ab606c67641f6c1aa2d978e8035eb5741983d5baa3fc36d0393f7d0","observation_id":"2be4de10-0e82-443b-8876-c74898e99486","resolution":{"observed_at":"2026-07-13T02:46:49.236604Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-13T02:46:49.236604Z","title":"An overview of laser injection against embedded neural network models,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2607.09473","last_updated":"2026-07-10T14:44:32Z","snapshot_observed_at":"2026-08-09T12:37:27.948833Z","submitted_at":"2026-07-10T14:44:32Z","title":"Triggering Stealthy Feature Map Backdoors via Physical Fault Injection in Embedded Neural Networks","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-07-13T02:46:49.236604Z"},"links":{"citing_paper":"/paper/2607.09473"},"observation_digest":"sha256:cac72562fed4e01df4466f2fff68cf468ce842e6366a5a00089bc021fa649f6f","observation_id":"ecb5b276-f86d-4dd2-bf88-6f185c0f996c","resolution":{"observed_at":"2026-07-13T02:46:49.236604Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-13T02:46:49.236604Z","title":"Fault injection and safe-error attack for extraction of embedded neural network models,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.09473","last_updated":"2026-07-10T14:44:32Z","snapshot_observed_at":"2026-08-09T12:37:27.948833Z","submitted_at":"2026-07-10T14:44:32Z","title":"Triggering Stealthy Feature Map Backdoors via Physical Fault Injection in Embedded Neural Networks","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-07-13T02:46:49.236604Z"},"links":{"citing_paper":"/paper/2607.09473"},"observation_digest":"sha256:911cbbd0ff8c0392c51fb426f49ce28882d36b7cc1793e3d024bf427721ac561","observation_id":"58e43cfe-9e4b-404b-a1b8-a12ec8e8b2e3","resolution":{"observed_at":"2026-07-13T02:46:49.236604Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-13T02:46:49.236604Z","title":"Evaluation of parameter-based attacks against embedded neural net- works with laser injection,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.09473","last_updated":"2026-07-10T14:44:32Z","snapshot_observed_at":"2026-08-09T12:37:27.948833Z","submitted_at":"2026-07-10T14:44:32Z","title":"Triggering Stealthy Feature Map Backdoors via Physical Fault Injection in Embedded Neural Networks","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-07-13T02:46:49.236604Z"},"links":{"citing_paper":"/paper/2607.09473"},"observation_digest":"sha256:4f22197a8dbc7ed0210fcbdbb579e532e2c3af537fc09249a89fd58bd599a649","observation_id":"ce9e85fc-82ef-4eb8-86eb-826a00783db4","resolution":{"observed_at":"2026-07-13T02:46:49.236604Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-13T02:46:49.236604Z","title":"Imperceptible misclas- sification attack on deep learning accelerator by glitch injection,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2607.09473","last_updated":"2026-07-10T14:44:32Z","snapshot_observed_at":"2026-08-09T12:37:27.948833Z","submitted_at":"2026-07-10T14:44:32Z","title":"Triggering Stealthy Feature Map Backdoors via Physical Fault Injection in Embedded Neural Networks","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-07-13T02:46:49.236604Z"},"links":{"citing_paper":"/paper/2607.09473"},"observation_digest":"sha256:768b2a9728fb0e344e831a09b556bd5aab53281dbf013f380b11b85c33bf57d8","observation_id":"f0f8e3ea-ec15-4df1-9469-f8f0f98ad546","resolution":{"observed_at":"2026-07-13T02:46:49.236604Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-13T02:46:49.236604Z","title":"Stealthy and robust glitch injection attack on deep learning accelerator for target with varia- tional viewpoint,","venue":null,"work_id":null,"year":1928},"citing_paper":{"arxiv_id":"2607.09473","last_updated":"2026-07-10T14:44:32Z","snapshot_observed_at":"2026-08-09T12:37:27.948833Z","submitted_at":"2026-07-10T14:44:32Z","title":"Triggering Stealthy Feature Map Backdoors via Physical Fault Injection in Embedded Neural Networks","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-07-13T02:46:49.236604Z"},"links":{"citing_paper":"/paper/2607.09473"},"observation_digest":"sha256:4be79787bb4446837696bf1c9d1e92de9bb373b7f74b335a32b6af69829f8d22","observation_id":"12767d9b-ebd2-477f-9485-7447bf4ad1f5","resolution":{"observed_at":"2026-07-13T02:46:49.236604Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-13T02:46:49.236604Z","title":"Derailed: Arbitrarily controlling dnn out- puts with targeted fault injection attacks,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.09473","last_updated":"2026-07-10T14:44:32Z","snapshot_observed_at":"2026-08-09T12:37:27.948833Z","submitted_at":"2026-07-10T14:44:32Z","title":"Triggering Stealthy Feature Map Backdoors via Physical Fault Injection in Embedded Neural Networks","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-07-13T02:46:49.236604Z"},"links":{"citing_paper":"/paper/2607.09473"},"observation_digest":"sha256:2718962e7f4d30780b20f587c3b9a3d29eeb9d79e581548870b3f44b570d52d7","observation_id":"071d0237-7a3a-48ba-b6c9-2b7be430fc6b","resolution":{"observed_at":"2026-07-13T02:46:49.236604Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-13T02:46:49.236604Z","title":"Precision strike: Targeted misclassification of accelerated cnns with a single clock glitch,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.09473","last_updated":"2026-07-10T14:44:32Z","snapshot_observed_at":"2026-08-09T12:37:27.948833Z","submitted_at":"2026-07-10T14:44:32Z","title":"Triggering Stealthy Feature Map Backdoors via Physical Fault Injection in Embedded Neural Networks","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-07-13T02:46:49.236604Z"},"links":{"citing_paper":"/paper/2607.09473"},"observation_digest":"sha256:a9035b2b0ff8d541cad2068e70a376bf29969c1af7022df3f502fdb14d3bd5f1","observation_id":"e8d9d702-43fd-49e3-8b91-c782b040d583","resolution":{"observed_at":"2026-07-13T02:46:49.236604Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-13T02:46:49.236604Z","title":"Clock glitch fault attacks on deep neural networks and their countermeasures,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.09473","last_updated":"2026-07-10T14:44:32Z","snapshot_observed_at":"2026-08-09T12:37:27.948833Z","submitted_at":"2026-07-10T14:44:32Z","title":"Triggering Stealthy Feature Map Backdoors via Physical Fault Injection in Embedded Neural Networks","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-07-13T02:46:49.236604Z"},"links":{"citing_paper":"/paper/2607.09473"},"observation_digest":"sha256:02b73a0b0e505c1c51bb2991130180d2053d57b4c9ad72fc429a163138f6324c","observation_id":"90e8d94f-4838-4b86-876e-48e0beebf910","resolution":{"observed_at":"2026-07-13T02:46:49.236604Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-13T02:46:49.236604Z","title":"Fault injection attacks on machine learning- based quantum computer readout error correction,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.09473","last_updated":"2026-07-10T14:44:32Z","snapshot_observed_at":"2026-08-09T12:37:27.948833Z","submitted_at":"2026-07-10T14:44:32Z","title":"Triggering Stealthy Feature Map Backdoors via Physical Fault Injection in Embedded Neural Networks","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-07-13T02:46:49.236604Z"},"links":{"citing_paper":"/paper/2607.09473"},"observation_digest":"sha256:221bf62e76c654f2252e4cf5c696f22a64bc8f7d30a49fec317bca870e596082","observation_id":"76ac31c0-6d10-4065-8b0b-ec53d86f7a3f","resolution":{"observed_at":"2026-07-13T02:46:49.236604Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-13T02:46:49.236604Z","title":"Practical electro- magnetic fault injection on intel neural compute stick 2,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.09473","last_updated":"2026-07-10T14:44:32Z","snapshot_observed_at":"2026-08-09T12:37:27.948833Z","submitted_at":"2026-07-10T14:44:32Z","title":"Triggering Stealthy Feature Map Backdoors via Physical Fault Injection in Embedded Neural Networks","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-07-13T02:46:49.236604Z"},"links":{"citing_paper":"/paper/2607.09473"},"observation_digest":"sha256:90941473e3f934e89643758429572d0e9e379018b39ceba655d1d11b4f402105","observation_id":"14152810-77ba-403c-961e-07d05e6d9b80","resolution":{"observed_at":"2026-07-13T02:46:49.236604Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-13T02:46:49.236604Z","title":"Investigation on the impact of practical fault model for commercial edge machine learn- ing devices,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.09473","last_updated":"2026-07-10T14:44:32Z","snapshot_observed_at":"2026-08-09T12:37:27.948833Z","submitted_at":"2026-07-10T14:44:32Z","title":"Triggering Stealthy Feature Map Backdoors via Physical Fault Injection in Embedded Neural Networks","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-07-13T02:46:49.236604Z"},"links":{"citing_paper":"/paper/2607.09473"},"observation_digest":"sha256:91b4c14b337dc2a5b0881b4e35ee9f5cbd41867e3c82e1b7dcc5c2501f123b3c","observation_id":"d0bef55d-a007-4c44-a594-321fcd9d942a","resolution":{"observed_at":"2026-07-13T02:46:49.236604Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-13T02:46:49.236604Z","title":"Fault injection attack against deep neural network-parameter exposure in random bits-flip model,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.09473","last_updated":"2026-07-10T14:44:32Z","snapshot_observed_at":"2026-08-09T12:37:27.948833Z","submitted_at":"2026-07-10T14:44:32Z","title":"Triggering Stealthy Feature Map Backdoors via Physical Fault Injection in Embedded Neural Networks","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-07-13T02:46:49.236604Z"},"links":{"citing_paper":"/paper/2607.09473"},"observation_digest":"sha256:6e945426da975c810729cf03660e1600d55548f4d429fc81e2a27856d689a2bd","observation_id":"cccb170d-89ca-452f-8c04-e147fdaeffdc","resolution":{"observed_at":"2026-07-13T02:46:49.236604Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2602.16309","last_updated":"2026-04-11T13:32:02Z","snapshot_observed_at":"2026-07-06T22:46:17.123722Z","submitted_at":"2026-02-18T09:40:29Z","title":"The Weight of a Bit: EMFI Sensitivity Analysis of Embedded Deep Learning Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2602.16309","snapshot_observed_at":"2026-07-13T02:46:49.236604Z","title":"The weight of a bit: EMFI sen- sitivity analysis of embedded deep learning models,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.09473","last_updated":"2026-07-10T14:44:32Z","snapshot_observed_at":"2026-08-09T12:37:27.948833Z","submitted_at":"2026-07-10T14:44:32Z","title":"Triggering Stealthy Feature Map Backdoors via Physical Fault Injection in Embedded Neural Networks","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-07-13T02:46:49.236604Z"},"links":{"cited_paper":"/paper/2602.16309","citing_paper":"/paper/2607.09473"},"observation_digest":"sha256:e2f9241de302e219eba35f11cf1e17999aafbb2a486bc331d62e1a37c9589fba","observation_id":"5bbeb07d-f7b0-4eb1-8ad1-dd2acbb813ba","resolution":{"observed_at":"2026-07-13T02:46:49.236604Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-13T02:46:49.236604Z","title":"Prometheusfree: Concurrent detection of laser fault in- jection attacks in optical neural networks,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.09473","last_updated":"2026-07-10T14:44:32Z","snapshot_observed_at":"2026-08-09T12:37:27.948833Z","submitted_at":"2026-07-10T14:44:32Z","title":"Triggering Stealthy Feature Map Backdoors via Physical Fault Injection in Embedded Neural Networks","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-07-13T02:46:49.236604Z"},"links":{"citing_paper":"/paper/2607.09473"},"observation_digest":"sha256:190c2d51d7e61f5f1c42b148a1855f65cfd0da93de78981dada198c066f08d25","observation_id":"52cfb775-58c7-4376-898b-3b9bd31ee74b","resolution":{"observed_at":"2026-07-13T02:46:49.236604Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-13T02:46:49.236604Z","title":"How practical are fault injection attacks, really?","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2607.09473","last_updated":"2026-07-10T14:44:32Z","snapshot_observed_at":"2026-08-09T12:37:27.948833Z","submitted_at":"2026-07-10T14:44:32Z","title":"Triggering Stealthy Feature Map Backdoors via Physical Fault Injection in Embedded Neural Networks","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-07-13T02:46:49.236604Z"},"links":{"citing_paper":"/paper/2607.09473"},"observation_digest":"sha256:744a9a1ae931a6bc5f0bfd81d8a8f45cddd045b51c4f33882201907485f09e94","observation_id":"d4ef23d5-119e-45c1-82cb-2a75244bf799","resolution":{"observed_at":"2026-07-13T02:46:49.236604Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-13T02:46:49.236604Z","title":"Sok: A beginner- friendly introduction to fault injection attacks,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.09473","last_updated":"2026-07-10T14:44:32Z","snapshot_observed_at":"2026-08-09T12:37:27.948833Z","submitted_at":"2026-07-10T14:44:32Z","title":"Triggering Stealthy Feature Map Backdoors via Physical Fault Injection in Embedded Neural Networks","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-07-13T02:46:49.236604Z"},"links":{"citing_paper":"/paper/2607.09473"},"observation_digest":"sha256:3a977201032b3881f1c107eb9bc964b7cd5cf3024d1602a1ff2b6a526d1c8f42","observation_id":"10c2be2c-2fd6-4dfd-857a-7b15340147d3","resolution":{"observed_at":"2026-07-13T02:46:49.236604Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-13T02:46:49.236604Z","title":"Yes, One-Bit-Flip matters! universal DNN model inference depletion with runtime code fault injection,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.09473","last_updated":"2026-07-10T14:44:32Z","snapshot_observed_at":"2026-08-09T12:37:27.948833Z","submitted_at":"2026-07-10T14:44:32Z","title":"Triggering Stealthy Feature Map Backdoors via Physical Fault Injection in Embedded Neural Networks","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-07-13T02:46:49.236604Z"},"links":{"citing_paper":"/paper/2607.09473"},"observation_digest":"sha256:51c8fea0b3fc59566134c3d4f432280da42ca1e36d485b25cba3e60cea573773","observation_id":"d96ac48d-9993-44c5-81b8-c658a50b08fc","resolution":{"observed_at":"2026-07-13T02:46:49.236604Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-13T02:46:49.236604Z","title":"Terminal brain damage: Exposing the graceless degradation in deep neural networks under hardware fault attacks,","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2607.09473","last_updated":"2026-07-10T14:44:32Z","snapshot_observed_at":"2026-08-09T12:37:27.948833Z","submitted_at":"2026-07-10T14:44:32Z","title":"Triggering Stealthy Feature Map Backdoors via Physical Fault Injection in Embedded Neural Networks","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-07-13T02:46:49.236604Z"},"links":{"citing_paper":"/paper/2607.09473"},"observation_digest":"sha256:1b98fa56660f1abbac58a64a4bf28ba1a2156d42ab6faed3669e3cc598b960c7","observation_id":"8f15c3c5-49d3-4133-b1f9-34e5e3a0a0a1","resolution":{"observed_at":"2026-07-13T02:46:49.236604Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-13T02:46:49.236604Z","title":"Don’t knock! rowhammer at the backdoor of DNN models,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.09473","last_updated":"2026-07-10T14:44:32Z","snapshot_observed_at":"2026-08-09T12:37:27.948833Z","submitted_at":"2026-07-10T14:44:32Z","title":"Triggering Stealthy Feature Map Backdoors via Physical Fault Injection in Embedded Neural Networks","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-07-13T02:46:49.236604Z"},"links":{"citing_paper":"/paper/2607.09473"},"observation_digest":"sha256:e454375ce1081959065d1019f81dc94b9a1e3e6080cbd770475afd4b0cd45248","observation_id":"ac1688b6-9ed4-4eac-ac67-ef55bac7c2ee","resolution":{"observed_at":"2026-07-13T02:46:49.236604Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-13T02:46:49.236604Z","title":"Tossing in the dark: Practical Bit-Flipping on gray-box deep neural networks for runtime trojan injection,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.09473","last_updated":"2026-07-10T14:44:32Z","snapshot_observed_at":"2026-08-09T12:37:27.948833Z","submitted_at":"2026-07-10T14:44:32Z","title":"Triggering Stealthy Feature Map Backdoors via Physical Fault Injection in Embedded Neural Networks","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-07-13T02:46:49.236604Z"},"links":{"citing_paper":"/paper/2607.09473"},"observation_digest":"sha256:113bdf038326c579320b13cd57eb206f477804bf0a2b930375c79bc7126febeb","observation_id":"1f99b560-6332-45e0-8b49-8e6e273f7412","resolution":{"observed_at":"2026-07-13T02:46:49.236604Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-13T02:46:49.236604Z","title":"DeepHammer: Depleting the intelligence of deep neural networks through targeted chain of bit flips,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2607.09473","last_updated":"2026-07-10T14:44:32Z","snapshot_observed_at":"2026-08-09T12:37:27.948833Z","submitted_at":"2026-07-10T14:44:32Z","title":"Triggering Stealthy Feature Map Backdoors via Physical Fault Injection in Embedded Neural Networks","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-07-13T02:46:49.236604Z"},"links":{"citing_paper":"/paper/2607.09473"},"observation_digest":"sha256:e60ff1b8fc08f8da3263bd1fdfdc4df57294eaab38143006c7d35d900ad59491","observation_id":"088cfc5c-ae7b-4f9c-b191-45c095c76b54","resolution":{"observed_at":"2026-07-13T02:46:49.236604Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-13T02:46:49.236604Z","title":"Hammering the diagnosis: Rowhammer-induced stealthy trojan attacks on vit-based medical imaging,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.09473","last_updated":"2026-07-10T14:44:32Z","snapshot_observed_at":"2026-08-09T12:37:27.948833Z","submitted_at":"2026-07-10T14:44:32Z","title":"Triggering Stealthy Feature Map Backdoors via Physical Fault Injection in Embedded Neural Networks","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-07-13T02:46:49.236604Z"},"links":{"citing_paper":"/paper/2607.09473"},"observation_digest":"sha256:564b32d69b7a9a21e8391c85fe4c1ebd6a0b8641b221699d8b52b5042596cb73","observation_id":"375c1bb7-5f11-490b-9d7b-44aa32dd048f","resolution":{"observed_at":"2026-07-13T02:46:49.236604Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-13T02:46:49.236604Z","title":"A survey on fault attacks on symmetric key cryptosystems,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2607.09473","last_updated":"2026-07-10T14:44:32Z","snapshot_observed_at":"2026-08-09T12:37:27.948833Z","submitted_at":"2026-07-10T14:44:32Z","title":"Triggering Stealthy Feature Map Backdoors via Physical Fault Injection in Embedded Neural Networks","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-07-13T02:46:49.236604Z"},"links":{"citing_paper":"/paper/2607.09473"},"observation_digest":"sha256:0b120a0a123936e36d2100f6363018907ffa40d8ca674fa49ced89cb029efc08","observation_id":"c308bd18-9096-461b-80ec-ef2b90b198f9","resolution":{"observed_at":"2026-07-13T02:46:49.236604Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-13T02:46:49.236604Z","title":"Attacking deterministic signature schemes using fault attacks,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2607.09473","last_updated":"2026-07-10T14:44:32Z","snapshot_observed_at":"2026-08-09T12:37:27.948833Z","submitted_at":"2026-07-10T14:44:32Z","title":"Triggering Stealthy Feature Map Backdoors via Physical Fault Injection in Embedded Neural Networks","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-07-13T02:46:49.236604Z"},"links":{"citing_paper":"/paper/2607.09473"},"observation_digest":"sha256:10dbff2a3b837f9da4e39d24be64e3933a3bcfa623baf50f92d52a641f43a121","observation_id":"38bca969-7149-44a1-b314-f58df18dfe1d","resolution":{"observed_at":"2026-07-13T02:46:49.236604Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-13T02:46:49.236604Z","title":"Fault- injection attacks against nist’s post-quantum cryptography round 3 kem candidates,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2607.09473","last_updated":"2026-07-10T14:44:32Z","snapshot_observed_at":"2026-08-09T12:37:27.948833Z","submitted_at":"2026-07-10T14:44:32Z","title":"Triggering Stealthy Feature Map Backdoors via Physical Fault Injection in Embedded Neural Networks","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-07-13T02:46:49.236604Z"},"links":{"citing_paper":"/paper/2607.09473"},"observation_digest":"sha256:e5f0cbc4cf8cc57d9fab08caa09264431a024f18db7acff8892f429926beff37","observation_id":"cd4e27af-c1a2-4674-844c-12bd26d83288","resolution":{"observed_at":"2026-07-13T02:46:49.236604Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-13T02:46:49.236604Z","title":"Sok: On the physical security of uov-based signature schemes,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.09473","last_updated":"2026-07-10T14:44:32Z","snapshot_observed_at":"2026-08-09T12:37:27.948833Z","submitted_at":"2026-07-10T14:44:32Z","title":"Triggering Stealthy Feature Map Backdoors via Physical Fault Injection in Embedded Neural Networks","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-07-13T02:46:49.236604Z"},"links":{"citing_paper":"/paper/2607.09473"},"observation_digest":"sha256:c50478469e336107b3e2ed6427b952fee094211bd8ed887df10fefb25ea57c3a","observation_id":"8947b07d-dcb4-4b97-84b8-7065bd2d96e7","resolution":{"observed_at":"2026-07-13T02:46:49.236604Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-13T02:46:49.236604Z","title":"Proflip: Targeted trojan attack with progressive bit flips,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2607.09473","last_updated":"2026-07-10T14:44:32Z","snapshot_observed_at":"2026-08-09T12:37:27.948833Z","submitted_at":"2026-07-10T14:44:32Z","title":"Triggering Stealthy Feature Map Backdoors via Physical Fault Injection in Embedded Neural Networks","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-07-13T02:46:49.236604Z"},"links":{"citing_paper":"/paper/2607.09473"},"observation_digest":"sha256:522978e07e3ee422932559513ed2c42686b67af48f9399e72a891745aa086b1e","observation_id":"e384139f-f9ec-40bf-bacf-81ec8f04055a","resolution":{"observed_at":"2026-07-13T02:46:49.236604Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-13T02:46:49.236604Z","title":"Hardly perceptible trojan attack against neural networks with bit flips,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2607.09473","last_updated":"2026-07-10T14:44:32Z","snapshot_observed_at":"2026-08-09T12:37:27.948833Z","submitted_at":"2026-07-10T14:44:32Z","title":"Triggering Stealthy Feature Map Backdoors via Physical Fault Injection in Embedded Neural Networks","version":1},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-07-13T02:46:49.236604Z"},"links":{"citing_paper":"/paper/2607.09473"},"observation_digest":"sha256:18f182dfbb20896779352a7b6e4a12472bdfaf61426c156d0c2585ccade2dca8","observation_id":"2c100ecd-47f4-4301-99a9-d7cfdd3e4168","resolution":{"observed_at":"2026-07-13T02:46:49.236604Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-13T02:46:49.236604Z","title":"TrojViT: Trojan insertion in vision transformers,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.09473","last_updated":"2026-07-10T14:44:32Z","snapshot_observed_at":"2026-08-09T12:37:27.948833Z","submitted_at":"2026-07-10T14:44:32Z","title":"Triggering Stealthy Feature Map Backdoors via Physical Fault Injection in Embedded Neural Networks","version":1},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-07-13T02:46:49.236604Z"},"links":{"citing_paper":"/paper/2607.09473"},"observation_digest":"sha256:e7708674ede17d38b0d3f90d61e619d756b16086bb5166fab8d3ed7ed22c8d3f","observation_id":"caec9f35-03bd-4076-8571-4e18a1fefa96","resolution":{"observed_at":"2026-07-13T02:46:49.236604Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-13T02:46:49.236604Z","title":"Deep-TROJ: An inference stage trojan insertion algorithm through efficient weight replacement attack,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.09473","last_updated":"2026-07-10T14:44:32Z","snapshot_observed_at":"2026-08-09T12:37:27.948833Z","submitted_at":"2026-07-10T14:44:32Z","title":"Triggering Stealthy Feature Map Backdoors via Physical Fault Injection in Embedded Neural Networks","version":1},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-07-13T02:46:49.236604Z"},"links":{"citing_paper":"/paper/2607.09473"},"observation_digest":"sha256:3fe1142830ad5c715d3f531ed5d219f708516e2548460bb140c1ccf019690653","observation_id":"2c97f939-4ac6-47f5-916f-be0c85277efa","resolution":{"observed_at":"2026-07-13T02:46:49.236604Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-13T02:46:49.236604Z","title":"Neural cleanse: Identifying and mitigating backdoor attacks in neural networks,","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2607.09473","last_updated":"2026-07-10T14:44:32Z","snapshot_observed_at":"2026-08-09T12:37:27.948833Z","submitted_at":"2026-07-10T14:44:32Z","title":"Triggering Stealthy Feature Map Backdoors via Physical Fault Injection in Embedded Neural Networks","version":1},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-07-13T02:46:49.236604Z"},"links":{"citing_paper":"/paper/2607.09473"},"observation_digest":"sha256:36b2d81f811d7d66b94125fe16a3afa3995d491ca6356aadc16e9a1f2dcdaffb","observation_id":"3c42167e-090f-4a8f-8617-b7dfdc2cc480","resolution":{"observed_at":"2026-07-13T02:46:49.236604Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-13T02:46:49.236604Z","title":"ABS: Scanning neural networks for back-doors by artificial brain stimula- tion,","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2607.09473","last_updated":"2026-07-10T14:44:32Z","snapshot_observed_at":"2026-08-09T12:37:27.948833Z","submitted_at":"2026-07-10T14:44:32Z","title":"Triggering Stealthy Feature Map Backdoors via Physical Fault Injection in Embedded Neural Networks","version":1},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-07-13T02:46:49.236604Z"},"links":{"citing_paper":"/paper/2607.09473"},"observation_digest":"sha256:e3c88b32c9b5cf6cbdc42a0d0a3c97c5f976dce54d6b30f81689718c1e5899cc","observation_id":"ce384315-07a4-4fc4-8717-4f59773fb7d7","resolution":{"observed_at":"2026-07-13T02:46:49.236604Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1908.01763","last_updated":"2019-08-08T22:59:45Z","snapshot_observed_at":"2026-08-05T10:11:29.519917Z","submitted_at":"2019-08-02T22:46:03Z","title":"TABOR: A Highly Accurate Approach to Inspecting and Restoring Trojan Backdoors in AI Systems","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1908.01763","snapshot_observed_at":"2026-07-13T02:46:49.236604Z","title":"TABOR: A highly accurate approach to inspecting and restoring trojan backdoors in AI systems,","venue":null,"work_id":null,"year":1908},"citing_paper":{"arxiv_id":"2607.09473","last_updated":"2026-07-10T14:44:32Z","snapshot_observed_at":"2026-08-09T12:37:27.948833Z","submitted_at":"2026-07-10T14:44:32Z","title":"Triggering Stealthy Feature Map Backdoors via Physical Fault Injection in Embedded Neural Networks","version":1},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-07-13T02:46:49.236604Z"},"links":{"cited_paper":"/paper/1908.01763","citing_paper":"/paper/2607.09473"},"observation_digest":"sha256:703def4c5347c10c0d16005a55aba6893d918aca90dc2bc1f40128864b52e3ed","observation_id":"8b47b2ad-6416-4183-817b-59fe26216511","resolution":{"observed_at":"2026-07-13T02:46:49.236604Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-13T02:46:49.236604Z","title":"Towards reliable and efficient backdoor trigger inversion via decoupling benign features,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.09473","last_updated":"2026-07-10T14:44:32Z","snapshot_observed_at":"2026-08-09T12:37:27.948833Z","submitted_at":"2026-07-10T14:44:32Z","title":"Triggering Stealthy Feature Map Backdoors via Physical Fault Injection in Embedded Neural Networks","version":1},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-07-13T02:46:49.236604Z"},"links":{"citing_paper":"/paper/2607.09473"},"observation_digest":"sha256:e52c484b17f42f4cfb6732c534bba0404871f9cdd5bb678350c94b9449745dfc","observation_id":"f4a6eef1-6f9c-4497-9c15-b5cbf40c183c","resolution":{"observed_at":"2026-07-13T02:46:49.236604Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-13T02:46:49.236604Z","title":"STRIP: A defence against trojan attacks on deep neural networks,","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2607.09473","last_updated":"2026-07-10T14:44:32Z","snapshot_observed_at":"2026-08-09T12:37:27.948833Z","submitted_at":"2026-07-10T14:44:32Z","title":"Triggering Stealthy Feature Map Backdoors via Physical Fault Injection in Embedded Neural Networks","version":1},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-07-13T02:46:49.236604Z"},"links":{"citing_paper":"/paper/2607.09473"},"observation_digest":"sha256:3b8e64852fc6fa6165b3e16917d178bd3ddd14d0e6337aabd65959c454278c3e","observation_id":"46c81857-aa0f-4f83-875a-8aba9106ffbb","resolution":{"observed_at":"2026-07-13T02:46:49.236604Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-13T02:46:49.236604Z","title":"Detecting backdoor attacks on deep neural networks by activation clustering,","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2607.09473","last_updated":"2026-07-10T14:44:32Z","snapshot_observed_at":"2026-08-09T12:37:27.948833Z","submitted_at":"2026-07-10T14:44:32Z","title":"Triggering Stealthy Feature Map Backdoors via Physical Fault Injection in Embedded Neural Networks","version":1},"reference_index":58,"source":"pdf_text","source_observed_at":"2026-07-13T02:46:49.236604Z"},"links":{"citing_paper":"/paper/2607.09473"},"observation_digest":"sha256:783706d0e127f82476193f8e9085b93c29ce5975750c1f9df3b7e8bf2ef61e66","observation_id":"bc43c1f1-3e9e-4d92-bf6f-b42de1b0049e","resolution":{"observed_at":"2026-07-13T02:46:49.236604Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-13T02:46:49.236604Z","title":"Spectral signatures in backdoor at- tacks,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2607.09473","last_updated":"2026-07-10T14:44:32Z","snapshot_observed_at":"2026-08-09T12:37:27.948833Z","submitted_at":"2026-07-10T14:44:32Z","title":"Triggering Stealthy Feature Map Backdoors via Physical Fault Injection in Embedded Neural Networks","version":1},"reference_index":59,"source":"pdf_text","source_observed_at":"2026-07-13T02:46:49.236604Z"},"links":{"citing_paper":"/paper/2607.09473"},"observation_digest":"sha256:629f7ae9d5061b337536720daeb6908df1fc0de7bf935afca3290050af94ad92","observation_id":"ed93ee7f-3c74-461f-8cd5-582633beb45f","resolution":{"observed_at":"2026-07-13T02:46:49.236604Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-13T02:46:49.236604Z","title":"Fine-pruning: Defending against backdooring attacks on deep neural networks,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2607.09473","last_updated":"2026-07-10T14:44:32Z","snapshot_observed_at":"2026-08-09T12:37:27.948833Z","submitted_at":"2026-07-10T14:44:32Z","title":"Triggering Stealthy Feature Map Backdoors via Physical Fault Injection in Embedded Neural Networks","version":1},"reference_index":60,"source":"pdf_text","source_observed_at":"2026-07-13T02:46:49.236604Z"},"links":{"citing_paper":"/paper/2607.09473"},"observation_digest":"sha256:941efbe2d05a16496c1b59a389f92b5f1dd6fa4968e0be019bcdd93260acdc2d","observation_id":"198482bb-d64a-48e4-8c9c-6f7679a451b3","resolution":{"observed_at":"2026-07-13T02:46:49.236604Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-13T02:46:49.236604Z","title":"Adversarial neuron pruning purifies backdoored deep models,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2607.09473","last_updated":"2026-07-10T14:44:32Z","snapshot_observed_at":"2026-08-09T12:37:27.948833Z","submitted_at":"2026-07-10T14:44:32Z","title":"Triggering Stealthy Feature Map Backdoors via Physical Fault Injection in Embedded Neural Networks","version":1},"reference_index":61,"source":"pdf_text","source_observed_at":"2026-07-13T02:46:49.236604Z"},"links":{"citing_paper":"/paper/2607.09473"},"observation_digest":"sha256:e2fd9598b873bc210f03c62a4a6e71f52cebf4cbdf5dd5cf76568f87797768aa","observation_id":"2e6aafc3-b087-4da4-a103-a767534a65e1","resolution":{"observed_at":"2026-07-13T02:46:49.236604Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-13T02:46:49.236604Z","title":"Detecting AI trojans using meta neural analysis,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2607.09473","last_updated":"2026-07-10T14:44:32Z","snapshot_observed_at":"2026-08-09T12:37:27.948833Z","submitted_at":"2026-07-10T14:44:32Z","title":"Triggering Stealthy Feature Map Backdoors via Physical Fault Injection in Embedded Neural Networks","version":1},"reference_index":62,"source":"pdf_text","source_observed_at":"2026-07-13T02:46:49.236604Z"},"links":{"citing_paper":"/paper/2607.09473"},"observation_digest":"sha256:06d903256fd4f2095cf91444b4c04b6eff8037911a910b0fac6f721320fb71d2","observation_id":"19015f08-fb3f-4efe-82d4-96c193a826d0","resolution":{"observed_at":"2026-07-13T02:46:49.236604Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-13T02:46:49.236604Z","title":"Anti-backdoor learning: Training clean models on poisoned data,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2607.09473","last_updated":"2026-07-10T14:44:32Z","snapshot_observed_at":"2026-08-09T12:37:27.948833Z","submitted_at":"2026-07-10T14:44:32Z","title":"Triggering Stealthy Feature Map Backdoors via Physical Fault Injection in Embedded Neural Networks","version":1},"reference_index":63,"source":"pdf_text","source_observed_at":"2026-07-13T02:46:49.236604Z"},"links":{"citing_paper":"/paper/2607.09473"},"observation_digest":"sha256:b8ee8944d36f4c67f2e1db4463d252ba7a50e6c72880375ffccc80f043bc5ce2","observation_id":"044463ff-7378-47a2-aff0-ef014c9fad3e","resolution":{"observed_at":"2026-07-13T02:46:49.236604Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2503.22759","last_updated":"2025-03-27T15:16:57Z","snapshot_observed_at":"2026-08-09T12:37:10.849716Z","submitted_at":"2025-03-27T15:16:57Z","title":"Data Poisoning in Deep Learning: A Survey","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2503.22759","snapshot_observed_at":"2026-07-13T02:46:49.236604Z","title":"Data poisoning in deep learning: A survey,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.09473","last_updated":"2026-07-10T14:44:32Z","snapshot_observed_at":"2026-08-09T12:37:27.948833Z","submitted_at":"2026-07-10T14:44:32Z","title":"Triggering Stealthy Feature Map Backdoors via Physical Fault Injection in Embedded Neural Networks","version":1},"reference_index":64,"source":"pdf_text","source_observed_at":"2026-07-13T02:46:49.236604Z"},"links":{"cited_paper":"/paper/2503.22759","citing_paper":"/paper/2607.09473"},"observation_digest":"sha256:4ac87224c8210995abb8723faf680aa71080b2964c42d65311ca5f19dd845276","observation_id":"3361d026-974a-450a-91b0-6b7cc10393c6","resolution":{"observed_at":"2026-07-13T02:46:49.236604Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.13355","last_updated":"2024-03-20T07:34:18Z","snapshot_observed_at":"2026-08-07T22:23:06.111813Z","submitted_at":"2024-03-20T07:34:18Z","title":"BadEdit: Backdooring large language models by model editing","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.13355","snapshot_observed_at":"2026-07-13T02:46:49.236604Z","title":"Badedit: Backdooring large language models by model editing,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.09473","last_updated":"2026-07-10T14:44:32Z","snapshot_observed_at":"2026-08-09T12:37:27.948833Z","submitted_at":"2026-07-10T14:44:32Z","title":"Triggering Stealthy Feature Map Backdoors via Physical Fault Injection in Embedded Neural Networks","version":1},"reference_index":65,"source":"pdf_text","source_observed_at":"2026-07-13T02:46:49.236604Z"},"links":{"cited_paper":"/paper/2403.13355","citing_paper":"/paper/2607.09473"},"observation_digest":"sha256:e329801206847b43673194efda4d3fddaad7f94e32f0f558e9638a392f21ce8c","observation_id":"5f16240b-2b53-411c-97a9-d857763adc54","resolution":{"observed_at":"2026-07-13T02:46:49.236604Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-13T02:46:49.236604Z","title":"Precise Spatio-Temporal Electromagnetic Fault Injections on Data Transfers,","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2607.09473","last_updated":"2026-07-10T14:44:32Z","snapshot_observed_at":"2026-08-09T12:37:27.948833Z","submitted_at":"2026-07-10T14:44:32Z","title":"Triggering Stealthy Feature Map Backdoors via Physical Fault Injection in Embedded Neural Networks","version":1},"reference_index":66,"source":"pdf_text","source_observed_at":"2026-07-13T02:46:49.236604Z"},"links":{"citing_paper":"/paper/2607.09473"},"observation_digest":"sha256:facae7288fcd07b8679d1a3c509663893cd0892e402a47b685c54378e48b1465","observation_id":"9bf5cda0-02e2-443f-acdc-e353f05fb5fc","resolution":{"observed_at":"2026-07-13T02:46:49.236604Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-13T02:46:49.236604Z","title":"Electromagnetic fault injection: Towards a fault model on a 32-bit microcontroller,","venue":null,"work_id":null,"year":2013},"citing_paper":{"arxiv_id":"2607.09473","last_updated":"2026-07-10T14:44:32Z","snapshot_observed_at":"2026-08-09T12:37:27.948833Z","submitted_at":"2026-07-10T14:44:32Z","title":"Triggering Stealthy Feature Map Backdoors via Physical Fault Injection in Embedded Neural Networks","version":1},"reference_index":67,"source":"pdf_text","source_observed_at":"2026-07-13T02:46:49.236604Z"},"links":{"citing_paper":"/paper/2607.09473"},"observation_digest":"sha256:6a84dfcf089f7e3b933510d8d4d73db350ac7968265280c005f06f2371c36920","observation_id":"ca93f50b-2792-4581-a5be-49536af8b7eb","resolution":{"observed_at":"2026-07-13T02:46:49.236604Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-13T02:46:49.236604Z","title":"Fault injection attacks on cryptographic devices: Theory, practice, and countermeasures,","venue":null,"work_id":null,"year":2012},"citing_paper":{"arxiv_id":"2607.09473","last_updated":"2026-07-10T14:44:32Z","snapshot_observed_at":"2026-08-09T12:37:27.948833Z","submitted_at":"2026-07-10T14:44:32Z","title":"Triggering Stealthy Feature Map Backdoors via Physical Fault Injection in Embedded Neural Networks","version":1},"reference_index":68,"source":"pdf_text","source_observed_at":"2026-07-13T02:46:49.236604Z"},"links":{"citing_paper":"/paper/2607.09473"},"observation_digest":"sha256:0e1fdca72cf625f8d2a980abd6eb6835671374e8fa725452b25a551d135a1e1f","observation_id":"1f82e597-6385-4b5c-8f62-9235257ec6b0","resolution":{"observed_at":"2026-07-13T02:46:49.236604Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-13T02:46:49.236604Z","title":"Physical fault injection and side-channel attacks on mobile devices: A comprehensive anal- ysis,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2607.09473","last_updated":"2026-07-10T14:44:32Z","snapshot_observed_at":"2026-08-09T12:37:27.948833Z","submitted_at":"2026-07-10T14:44:32Z","title":"Triggering Stealthy Feature Map Backdoors via Physical Fault Injection in Embedded Neural Networks","version":1},"reference_index":69,"source":"pdf_text","source_observed_at":"2026-07-13T02:46:49.236604Z"},"links":{"citing_paper":"/paper/2607.09473"},"observation_digest":"sha256:fb29a680484ed5b80848075cf29cf0480ec52765b0db4a92797cc8bcb5fc4f9d","observation_id":"8be4dd35-affe-4a00-b4fb-5c59d0c83dae","resolution":{"observed_at":"2026-07-13T02:46:49.236604Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-13T02:46:49.236604Z","title":"The sorcerer’s apprentice guide to fault attacks,","venue":null,"work_id":null,"year":2006},"citing_paper":{"arxiv_id":"2607.09473","last_updated":"2026-07-10T14:44:32Z","snapshot_observed_at":"2026-08-09T12:37:27.948833Z","submitted_at":"2026-07-10T14:44:32Z","title":"Triggering Stealthy Feature Map Backdoors via Physical Fault Injection in Embedded Neural Networks","version":1},"reference_index":70,"source":"pdf_text","source_observed_at":"2026-07-13T02:46:49.236604Z"},"links":{"citing_paper":"/paper/2607.09473"},"observation_digest":"sha256:79492c10d6db650e42bde786d5e96783be1490cec0b045bafdc0101283f67add","observation_id":"7e754c5e-d067-400b-9277-b254601ff423","resolution":{"observed_at":"2026-07-13T02:46:49.236604Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-13T02:46:49.236604Z","title":"Self-testing/correcting with applications to numerical problems,","venue":null,"work_id":null,"year":1993},"citing_paper":{"arxiv_id":"2607.09473","last_updated":"2026-07-10T14:44:32Z","snapshot_observed_at":"2026-08-09T12:37:27.948833Z","submitted_at":"2026-07-10T14:44:32Z","title":"Triggering Stealthy Feature Map Backdoors via Physical Fault Injection in Embedded Neural Networks","version":1},"reference_index":71,"source":"pdf_text","source_observed_at":"2026-07-13T02:46:49.236604Z"},"links":{"citing_paper":"/paper/2607.09473"},"observation_digest":"sha256:d50f92f176f4e86f939136b80e38010476eb27abafb523d682047be2a920a2b6","observation_id":"d1d74be2-24ca-4792-b49d-594486fee79b","resolution":{"observed_at":"2026-07-13T02:46:49.236604Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-13T02:46:49.236604Z","title":"Systematic use of random self-reducibility in cryptographic code against physical attacks,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.09473","last_updated":"2026-07-10T14:44:32Z","snapshot_observed_at":"2026-08-09T12:37:27.948833Z","submitted_at":"2026-07-10T14:44:32Z","title":"Triggering Stealthy Feature Map Backdoors via Physical Fault Injection in Embedded Neural Networks","version":1},"reference_index":72,"source":"pdf_text","source_observed_at":"2026-07-13T02:46:49.236604Z"},"links":{"citing_paper":"/paper/2607.09473"},"observation_digest":"sha256:ae8a3f566c393e6ec0ca98b0819f206104e6aee91023e7677ef5ce4b1444ea4a","observation_id":"d8f4e1b8-e2a5-4c87-9b7d-396a207927f4","resolution":{"observed_at":"2026-07-13T02:46:49.236604Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-07-13T02:46:49.236604Z","title":"Fault injection attacks and countermeasures on TinyML algorithms,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.09473","last_updated":"2026-07-10T14:44:32Z","snapshot_observed_at":"2026-08-09T12:37:27.948833Z","submitted_at":"2026-07-10T14:44:32Z","title":"Triggering Stealthy Feature Map Backdoors via Physical Fault Injection in Embedded Neural Networks","version":1},"reference_index":73,"source":"pdf_text","source_observed_at":"2026-07-13T02:46:49.236604Z"},"links":{"citing_paper":"/paper/2607.09473"},"observation_digest":"sha256:a243dc8de33837fe3c03d31f8dbb401c8f7e8971027aa9127bf3b8b126420e30","observation_id":"d129c57f-80ff-4555-b65d-b3dfc282e28e","resolution":{"observed_at":"2026-07-13T02:46:49.236604Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2607.09473","last_updated":"2026-07-10T14:44:32Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-09T12:37:27.948833Z","submitted_at":"2026-07-10T14:44:32Z","title":"Triggering Stealthy Feature Map Backdoors via Physical Fault Injection in Embedded Neural Networks"},"reference_resolution":{"displayed":73,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":73,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":73},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"thesis":"As of 9 August 2026, this Paper Citation Record lists 73 of 73 outbound references and 0 inbound Pith citation observations for arXiv:2607.09473."}