{"as_of":"2026-08-21T23:27:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:8d708ea37671c037ee997c170ee4f34cec6a89aa2bb3ada986cfa3f17abbcd1d","coverage":[{"denominator":53,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":53,"source":"paper_references, paper_reference_links","source_observed_at":"2026-05-12T23:08:20.650857Z","state":"measured"},{"denominator":153,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":153,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-21T06:32:19.484+00:00","state":"measured"},{"denominator":220,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":100,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-16T11:17:20.519150Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"pith","source_observed_at":"2026-07-11T00:47:43.661742Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"cited_work":{"arxiv_id":"1708.06733","doi":null,"metadata_source":"pith","pith_arxiv_id":"1708.06733","snapshot_observed_at":"2026-07-11T00:47:43.661742Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","venue":"cs.CR","work_id":"7b1cd3ac-9abd-4579-8d13-c75d30c83a5f","year":2017},"citing_paper":{"arxiv_id":"1712.05526","last_updated":"2017-12-15T04:26:26Z","snapshot_observed_at":"2026-07-06T06:14:30.795326Z","submitted_at":"2017-12-15T04:26:26Z","title":"Targeted Backdoor Attacks on Deep Learning Systems Using Data Poisoning","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-05-14T00:38:54.609346Z"},"links":{"cited_paper":"/paper/1708.06733","citing_paper":"/paper/1712.05526"},"observation_digest":"sha256:483e09849f141edd820f9d177976d733a7367e422a21725feec3998331d3732d","observation_id":"5a112b43-ec26-42cf-9923-4f4c2525a60e","resolution":{"observed_at":"2026-05-14T00:38:54.692966Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"cited_work":{"arxiv_id":"1708.06733","doi":null,"metadata_source":"pith","pith_arxiv_id":"1708.06733","snapshot_observed_at":"2026-07-11T00:47:43.661742Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","venue":"cs.CR","work_id":"7b1cd3ac-9abd-4579-8d13-c75d30c83a5f","year":2017},"citing_paper":{"arxiv_id":"1907.03483","last_updated":"2019-07-08T09:57:12Z","snapshot_observed_at":"2026-08-13T03:40:00.292326Z","submitted_at":"2019-07-08T09:57:12Z","title":"Quantifying Transparency of Machine Learning Systems through Analysis of Contributions","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-05-25T01:15:32.266183Z"},"links":{"cited_paper":"/paper/1708.06733","citing_paper":"/paper/1907.03483"},"observation_digest":"sha256:d6cbefe5646ec6841f09370556629be458f85afb660ceb8ee6ca2127e99d7a5f","observation_id":"a19036a9-ce77-4cbb-9da7-7bd6ec45ea56","resolution":{"observed_at":"2026-05-25T01:16:31.755517Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1708.06733","snapshot_observed_at":"2026-08-14T15:43:28.840933Z","title":"Badnets: Identifying vulnerabilities in the machine learning model supply chain","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"1908.00686","last_updated":"2020-12-10T09:03:53Z","snapshot_observed_at":"2026-08-20T14:41:17.607381Z","submitted_at":"2019-08-02T02:50:37Z","title":"Demon in the Variant: Statistical Analysis of DNNs for Robust Backdoor Contamination Detection","version":2},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-14T15:43:28.840933Z"},"links":{"cited_paper":"/paper/1708.06733","citing_paper":"/paper/1908.00686"},"observation_digest":"sha256:6145a1689c4b5e685488045b9fee243f3340b6c3202a31c0e8f129a95c4f51ef","observation_id":"7e1fdca4-5857-4876-a226-677eb74ec238","resolution":{"observed_at":"2026-08-14T15:43:28.840933Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1708.06733","snapshot_observed_at":"2026-08-14T15:29:09.484915Z","title":null,"venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"1908.01763","last_updated":"2019-08-08T22:59:45Z","snapshot_observed_at":"2026-08-20T12:00:36.141216Z","submitted_at":"2019-08-02T22:46:03Z","title":"TABOR: A Highly Accurate Approach to Inspecting and Restoring Trojan Backdoors in AI Systems","version":2},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-14T15:29:09.484915Z"},"links":{"cited_paper":"/paper/1708.06733","citing_paper":"/paper/1908.01763"},"observation_digest":"sha256:8f3502c0edf1c13975158cfc98d4a469d12078180db4c802554e3fa75670c47f","observation_id":"58a7c64b-e5c4-4dcf-9c4a-4d39cc53a3be","resolution":{"observed_at":"2026-08-14T15:29:09.484915Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1708.06733","snapshot_observed_at":"2026-08-14T14:57:44.870946Z","title":"Badnets: Identifying vulnerabilities in the machine learning model supply chain","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"1908.02203","last_updated":"2022-03-31T12:22:35Z","snapshot_observed_at":"2026-08-21T15:24:41.265581Z","submitted_at":"2019-08-06T15:11:37Z","title":"Model Agnostic Defence against Backdoor Attacks in Machine Learning","version":3},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-14T14:57:44.870946Z"},"links":{"cited_paper":"/paper/1708.06733","citing_paper":"/paper/1908.02203"},"observation_digest":"sha256:a6bad1a48eddb3c557c1a7ad33b6e8ca870e0eda1ebc77628322bdb7b5a517d3","observation_id":"80059b4a-fd56-4d1f-ab34-30f8dacf8b44","resolution":{"observed_at":"2026-08-14T14:57:44.870946Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1708.06733","snapshot_observed_at":"2026-08-14T10:46:59.297027Z","title":null,"venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"1908.10498","last_updated":"2020-08-19T15:52:35Z","snapshot_observed_at":"2026-08-19T03:06:37.691877Z","submitted_at":"2019-08-27T23:51:43Z","title":"Detection of Backdoors in Trained Classifiers Without Access to the Training Set","version":3},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-14T10:46:59.297027Z"},"links":{"cited_paper":"/paper/1708.06733","citing_paper":"/paper/1908.10498"},"observation_digest":"sha256:98924d4c42570c242da63215dbd4737fe2c3f769057cce0bc3c8917e97804b47","observation_id":"c5ccde4c-6cdf-465f-8ca7-d7ee6eeb0f9f","resolution":{"observed_at":"2026-08-14T10:46:59.297027Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"cited_work":{"arxiv_id":"1708.06733","doi":null,"metadata_source":"pith","pith_arxiv_id":"1708.06733","snapshot_observed_at":"2026-07-11T00:47:43.661742Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","venue":"cs.CR","work_id":"7b1cd3ac-9abd-4579-8d13-c75d30c83a5f","year":2017},"citing_paper":{"arxiv_id":"2109.13916","last_updated":"2022-06-16T21:12:42Z","snapshot_observed_at":"2026-07-06T11:52:19.105210Z","submitted_at":"2021-09-28T17:59:36Z","title":"Unsolved Problems in ML Safety","version":5},"reference_index":68,"source":"pdf_text","source_observed_at":"2026-05-16T20:45:27.421909Z"},"links":{"cited_paper":"/paper/1708.06733","citing_paper":"/paper/2109.13916"},"observation_digest":"sha256:2024c7647fdd95faf8a12ebdd7a0c2aac6491b376222dfd70805ca58c67dd262","observation_id":"e9464250-1e79-44f6-87d3-e6fa4ca07b23","resolution":{"observed_at":"2026-05-16T20:45:27.534567Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"cited_work":{"arxiv_id":"1708.06733","doi":null,"metadata_source":"pith","pith_arxiv_id":"1708.06733","snapshot_observed_at":"2026-07-11T00:47:43.661742Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","venue":"cs.CR","work_id":"7b1cd3ac-9abd-4579-8d13-c75d30c83a5f","year":2017},"citing_paper":{"arxiv_id":"2305.17493","last_updated":"2024-04-14T05:20:10Z","snapshot_observed_at":"2026-08-16T16:09:49.526553Z","submitted_at":"2023-05-27T15:10:41Z","title":"The Curse of Recursion: Training on Generated Data Makes Models Forget","version":3},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-05-20T14:04:58.271168Z"},"links":{"cited_paper":"/paper/1708.06733","citing_paper":"/paper/2305.17493"},"observation_digest":"sha256:3fd63a8367ddba82b2f43d704f9abd7caf413c829e01a6a2660b7bce739f5832","observation_id":"f325026a-3e31-47f7-953b-677be17ae1b3","resolution":{"observed_at":"2026-05-20T14:04:58.318655Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"cited_work":{"arxiv_id":"1708.06733","doi":null,"metadata_source":"pith","pith_arxiv_id":"1708.06733","snapshot_observed_at":"2026-07-11T00:47:43.661742Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","venue":"cs.CR","work_id":"7b1cd3ac-9abd-4579-8d13-c75d30c83a5f","year":2017},"citing_paper":{"arxiv_id":"2310.12508","last_updated":"2024-04-04T07:45:38Z","snapshot_observed_at":"2026-08-03T17:30:25.153454Z","submitted_at":"2023-10-19T06:17:17Z","title":"SalUn: Empowering Machine Unlearning via Gradient-based Weight Saliency in Both Image Classification and Generation","version":5},"reference_index":148,"source":"arxiv_source","source_observed_at":"2026-05-16T17:56:23.281678Z"},"links":{"cited_paper":"/paper/1708.06733","citing_paper":"/paper/2310.12508"},"observation_digest":"sha256:494f37609d0a1ed5b6546193873898553934559cfcb681d97677ccbed7b61bba","observation_id":"988b0abf-eb12-4374-b3c2-689297fcaf60","resolution":{"observed_at":"2026-05-16T17:56:23.484936Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"cited_work":{"arxiv_id":"1708.06733","doi":null,"metadata_source":"pith","pith_arxiv_id":"1708.06733","snapshot_observed_at":"2026-07-11T00:47:43.661742Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","venue":"cs.CR","work_id":"7b1cd3ac-9abd-4579-8d13-c75d30c83a5f","year":2017},"citing_paper":{"arxiv_id":"2406.10162","last_updated":"2024-06-29T00:28:47Z","snapshot_observed_at":"2026-08-18T14:49:13.384384Z","submitted_at":"2024-06-14T16:26:20Z","title":"Sycophancy to Subterfuge: Investigating Reward-Tampering in Large Language Models","version":3},"reference_index":56,"source":"arxiv_source","source_observed_at":"2026-05-17T14:43:29.496457Z"},"links":{"cited_paper":"/paper/1708.06733","citing_paper":"/paper/2406.10162"},"observation_digest":"sha256:4a0f0f4d71b1b48fd9d8a80cacafd14a01fc4066bdcdf50c8e57c7bfce6b99c9","observation_id":"add757e3-9109-4ac6-98d7-d6bbebbb4c61","resolution":{"observed_at":"2026-05-17T14:43:30.091068Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"cited_work":{"arxiv_id":"1708.06733","doi":null,"metadata_source":"pith","pith_arxiv_id":"1708.06733","snapshot_observed_at":"2026-07-11T00:47:43.661742Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","venue":"cs.CR","work_id":"7b1cd3ac-9abd-4579-8d13-c75d30c83a5f","year":2017},"citing_paper":{"arxiv_id":"2407.09658","last_updated":"2026-04-09T17:42:49Z","snapshot_observed_at":"2026-07-06T18:45:39.741597Z","submitted_at":"2024-07-12T19:38:42Z","title":"BoBa: Boosting Backdoor Detection through Data Distribution Inference in Federated Learning","version":2},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-05-23T23:09:32.656257Z"},"links":{"cited_paper":"/paper/1708.06733","citing_paper":"/paper/2407.09658"},"observation_digest":"sha256:936f7ebbecada4de33c33bc27d71c961deefa1870217c1ef946b4d12fe537686","observation_id":"de5ec65f-8aca-4a26-876b-5c925c68af15","resolution":{"observed_at":"2026-05-23T23:13:36.998754Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"cited_work":{"arxiv_id":"1708.06733","doi":null,"metadata_source":"pith","pith_arxiv_id":"1708.06733","snapshot_observed_at":"2026-07-11T00:47:43.661742Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","venue":"cs.CR","work_id":"7b1cd3ac-9abd-4579-8d13-c75d30c83a5f","year":2017},"citing_paper":{"arxiv_id":"2409.18169","last_updated":"2026-04-23T18:48:49Z","snapshot_observed_at":"2026-08-14T15:55:00.676298Z","submitted_at":"2024-09-26T17:55:22Z","title":"Harmful Fine-tuning Attacks and Defenses for Large Language Models: A Survey","version":6},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-05-23T20:58:16.237327Z"},"links":{"cited_paper":"/paper/1708.06733","citing_paper":"/paper/2409.18169"},"observation_digest":"sha256:70d711df61882beb61223c634325b4088c0293f65a8a5f1eadfca91442306153","observation_id":"07041f34-8b93-474d-87cd-ae0e05d0acca","resolution":{"observed_at":"2026-05-23T20:58:26.044695Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"cited_work":{"arxiv_id":"1708.06733","doi":null,"metadata_source":"pith","pith_arxiv_id":"1708.06733","snapshot_observed_at":"2026-07-11T00:47:43.661742Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","venue":"cs.CR","work_id":"7b1cd3ac-9abd-4579-8d13-c75d30c83a5f","year":2017},"citing_paper":{"arxiv_id":"2411.03926","last_updated":"2026-05-04T12:17:44Z","snapshot_observed_at":"2026-08-18T02:07:27.297000Z","submitted_at":"2024-11-06T13:57:53Z","title":"Act in Collusion: Distributed Multi-Target Backdoor Attacks in Federated Learning","version":3},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-05-23T17:23:43.022109Z"},"links":{"cited_paper":"/paper/1708.06733","citing_paper":"/paper/2411.03926"},"observation_digest":"sha256:fdb4e9260aae5c9922230b8c9aab916284c9d8c4c874a8166ce3218575b4cf19","observation_id":"dfed1c16-0d6d-4a34-8d2f-abe227ddf719","resolution":{"observed_at":"2026-05-23T17:25:43.841544Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1708.06733","snapshot_observed_at":"2026-08-12T20:26:05.065326Z","title":"Gu et al., ``Badnets: Identifying vulnerabilities in the machine learning model supply chain,'' in arXiv:1708.06733, 2017","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2411.09776","last_updated":"2025-08-14T17:44:57Z","snapshot_observed_at":"2026-08-19T19:48:59.794372Z","submitted_at":"2024-11-14T19:41:51Z","title":"Combining Machine Learning Defenses without Conflicts","version":2},"reference_index":171,"source":"arxiv_source","source_observed_at":"2026-08-12T20:26:05.065326Z"},"links":{"cited_paper":"/paper/1708.06733","citing_paper":"/paper/2411.09776"},"observation_digest":"sha256:dc4a1a9678d9c06023ef63e6d59c19e75f40245ee287a86790b5145684d0013d","observation_id":"c0fa4ebf-3130-46e2-82ab-bfaba1f0e5a8","resolution":{"observed_at":"2026-08-12T20:26:05.065326Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1708.06733","snapshot_observed_at":"2026-08-12T19:06:41.089831Z","title":null,"venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2411.11006","last_updated":"2025-03-06T07:50:21Z","snapshot_observed_at":"2026-08-17T06:02:00.538612Z","submitted_at":"2024-11-17T09:01:55Z","title":"BackdoorMBTI: A Backdoor Learning Multimodal Benchmark Tool Kit for Backdoor Defense Evaluation","version":2},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-12T19:06:41.089831Z"},"links":{"cited_paper":"/paper/1708.06733","citing_paper":"/paper/2411.11006"},"observation_digest":"sha256:fdbce1755560964bf197bb5ba8c8fd01f37cb99e753e130ada7f080232c77c46","observation_id":"64999e6e-91d6-497e-a1f8-b79be0db6e1a","resolution":{"observed_at":"2026-08-12T19:06:41.089831Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1708.06733","snapshot_observed_at":"2026-08-12T18:52:54.941970Z","title":"Badnets: Identifying vulnera- bilities in the machine learning model supply chain,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2411.11200","last_updated":"2025-01-07T00:23:43Z","snapshot_observed_at":"2026-08-21T22:32:56.482526Z","submitted_at":"2024-11-17T23:30:01Z","title":"Countering Backdoor Attacks in Image Recognition: A Survey and Evaluation of Mitigation Strategies","version":2},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-12T18:52:54.941970Z"},"links":{"cited_paper":"/paper/1708.06733","citing_paper":"/paper/2411.11200"},"observation_digest":"sha256:731562932584660310361e089540923f0a860f28959229bfcc73523d982a946b","observation_id":"325eccb4-d627-4aa0-8c1b-6052343977f7","resolution":{"observed_at":"2026-08-12T18:52:54.941970Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"cited_work":{"arxiv_id":"1708.06733","doi":null,"metadata_source":"pith","pith_arxiv_id":"1708.06733","snapshot_observed_at":"2026-07-11T00:47:43.661742Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","venue":"cs.CR","work_id":"7b1cd3ac-9abd-4579-8d13-c75d30c83a5f","year":2017},"citing_paper":{"arxiv_id":"2411.12220","last_updated":"2026-05-07T15:22:56Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-11-19T04:12:14Z","title":"DeTrigger: A Gradient-Centric Approach to Backdoor Attack Mitigation in Federated Learning","version":3},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-05-23T17:57:17.355234Z"},"links":{"cited_paper":"/paper/1708.06733","citing_paper":"/paper/2411.12220"},"observation_digest":"sha256:25e35223dfcdd22de093c74e63b042ae321b799116784bf4a798486bdae76809","observation_id":"4783f185-c79d-4a9a-8326-313446a9032a","resolution":{"observed_at":"2026-05-23T17:58:17.140536Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1708.06733","snapshot_observed_at":"2026-08-12T15:57:16.311560Z","title":"Badnets: Identifying vulner- abilities in the machine learning model supply chain,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2411.13778","last_updated":"2024-11-21T01:26:52Z","snapshot_observed_at":"2026-08-13T13:49:43.024753Z","submitted_at":"2024-11-21T01:26:52Z","title":"A Survey on Adversarial Robustness of LiDAR-based Machine Learning Perception in Autonomous Vehicles","version":1},"reference_index":110,"source":"pdf_text","source_observed_at":"2026-08-12T15:57:16.311560Z"},"links":{"cited_paper":"/paper/1708.06733","citing_paper":"/paper/2411.13778"},"observation_digest":"sha256:995c3ff68a8dce2af43ef1e8a0252418701d6372368dc5f3b69e92bc841702cc","observation_id":"30f58cda-cce8-46e1-afba-7ea68684bf45","resolution":{"observed_at":"2026-08-12T15:57:16.311560Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1708.06733","snapshot_observed_at":"2026-08-12T15:26:45.588219Z","title":"Bad- nets: Identifying vulnerabilities in the machine learning model supply chain","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2411.14243","last_updated":"2025-03-14T04:12:52Z","snapshot_observed_at":"2026-08-19T19:50:37.435891Z","submitted_at":"2024-11-21T15:50:59Z","title":"AnywhereDoor: Multi-Target Backdoor Attacks on Object Detection","version":2},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-12T15:26:45.588219Z"},"links":{"cited_paper":"/paper/1708.06733","citing_paper":"/paper/2411.14243"},"observation_digest":"sha256:7f3c2aa5a1542f8def84fe3244e83cff6451eb0f44d01def43b480444b722156","observation_id":"c0a42392-ed26-494c-8bf5-f26b347b00eb","resolution":{"observed_at":"2026-08-12T15:26:45.588219Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1708.06733","snapshot_observed_at":"2026-08-12T15:20:34.960303Z","title":", author Dolan-Gavitt, B","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2411.14351","last_updated":"2024-11-21T17:46:55Z","snapshot_observed_at":"2026-08-20T23:10:50.581373Z","submitted_at":"2024-11-21T17:46:55Z","title":"Indiscriminate Disruption of Conditional Inference on Multivariate Gaussians","version":1},"reference_index":12,"source":"arxiv_source","source_observed_at":"2026-08-12T15:20:34.960303Z"},"links":{"cited_paper":"/paper/1708.06733","citing_paper":"/paper/2411.14351"},"observation_digest":"sha256:c88b54b0900a122718b2206b689c04133688d420b8621c32515221f04ebe5bca","observation_id":"b99f7aa8-36fc-4fc4-8f11-81a23ad99b2d","resolution":{"observed_at":"2026-08-12T15:20:34.960303Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1708.06733","snapshot_observed_at":"2026-08-12T15:06:14.682377Z","title":"Badnets: Identifying vul- nerabilities in the machine learning model supply chain.,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2411.14681","last_updated":"2025-05-30T02:58:20Z","snapshot_observed_at":"2026-08-21T15:00:48.834560Z","submitted_at":"2024-11-22T02:27:27Z","title":"TrojanEdit: Multimodal Backdoor Attack Against Image Editing Model","version":2},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-12T15:06:14.682377Z"},"links":{"cited_paper":"/paper/1708.06733","citing_paper":"/paper/2411.14681"},"observation_digest":"sha256:4566082da56aa2cf796db41bc1514bd78e659b817ddb0039f46b69cf49c87472","observation_id":"b8c86fbf-0e38-4433-b46e-b3ea7b89908b","resolution":{"observed_at":"2026-08-12T15:06:14.682377Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1708.06733","snapshot_observed_at":"2026-08-12T14:24:59.495429Z","title":"Badnets: Identifying vulnerabil- ities in the machine learning model supply chain,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2411.15439","last_updated":"2024-11-23T03:46:45Z","snapshot_observed_at":"2026-08-13T06:30:14.359715Z","submitted_at":"2024-11-23T03:46:45Z","title":"Twin Trigger Generative Networks for Backdoor Attacks against Object Detection","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-12T14:24:59.495429Z"},"links":{"cited_paper":"/paper/1708.06733","citing_paper":"/paper/2411.15439"},"observation_digest":"sha256:7e9117575ddbd04ce8ea3265a063b6ffd2041d48946aef31752dabe371eb48ab","observation_id":"1d16b04d-4ab1-4ce1-b487-e7e866772ca1","resolution":{"observed_at":"2026-08-12T14:24:59.495429Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1708.06733","snapshot_observed_at":"2026-08-12T11:48:09.428229Z","title":"Badnets: Iden- tifying vulnerabilities in the machine learning model supply chain,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2411.18648","last_updated":"2024-12-31T02:11:04Z","snapshot_observed_at":"2026-08-18T09:13:53.538381Z","submitted_at":"2024-11-26T22:50:53Z","title":"MADE: Graph Backdoor Defense with Masked Unlearning","version":2},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-12T11:48:09.428229Z"},"links":{"cited_paper":"/paper/1708.06733","citing_paper":"/paper/2411.18648"},"observation_digest":"sha256:43910cdc6662ed2d0277b7f4900891bac417e26d5b670d3cc2476960f3ccc042","observation_id":"a2c95cc2-430a-457c-8f1a-5c843b53c272","resolution":{"observed_at":"2026-08-12T11:48:09.428229Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1708.06733","snapshot_observed_at":"2026-08-12T10:39:22.439689Z","title":"Badnets: Identify- ing vulnerabilities in the machine learning model supply chain,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2411.19075","last_updated":"2024-11-28T11:50:23Z","snapshot_observed_at":"2026-08-19T23:07:54.245589Z","submitted_at":"2024-11-28T11:50:23Z","title":"LADDER: Multi-objective Backdoor Attack via Evolutionary Algorithm","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-12T10:39:22.439689Z"},"links":{"cited_paper":"/paper/1708.06733","citing_paper":"/paper/2411.19075"},"observation_digest":"sha256:0f2b1c7d5c33a19771464db828e41adcd7774822c87b2537952c434726735ded","observation_id":"8b7a5d5f-1803-455e-8544-effc77bf064f","resolution":{"observed_at":"2026-08-12T10:39:22.439689Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1708.06733","snapshot_observed_at":"2026-08-12T10:08:55.726143Z","title":"Badnets: Identifying vulnerabilities in the ma- chine learning model supply chain","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2411.19530","last_updated":"2024-11-29T08:05:50Z","snapshot_observed_at":"2026-08-12T22:44:05.464138Z","submitted_at":"2024-11-29T08:05:50Z","title":"Quantized Delta Weight Is Safety Keeper","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-12T10:08:55.726143Z"},"links":{"cited_paper":"/paper/1708.06733","citing_paper":"/paper/2411.19530"},"observation_digest":"sha256:282d0e2ba21fb683d1ae7271ddc28d9925a321fbb7ae81870118e10437ee6d08","observation_id":"e1dba62a-8c6f-44b4-81bc-4802da6a54e1","resolution":{"observed_at":"2026-08-12T10:08:55.726143Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"cited_work":{"arxiv_id":"1708.06733","doi":null,"metadata_source":"pith","pith_arxiv_id":"1708.06733","snapshot_observed_at":"2026-07-11T00:47:43.661742Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","venue":"cs.CR","work_id":"7b1cd3ac-9abd-4579-8d13-c75d30c83a5f","year":2017},"citing_paper":{"arxiv_id":"2412.00727","last_updated":"2026-04-07T12:10:40Z","snapshot_observed_at":"2026-08-15T22:11:29.989162Z","submitted_at":"2024-12-01T08:39:12Z","title":"Perturb and Recover: Fine-tuning for Effective Backdoor Removal from CLIP","version":3},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-05-23T08:16:53.133986Z"},"links":{"cited_paper":"/paper/1708.06733","citing_paper":"/paper/2412.00727"},"observation_digest":"sha256:dacd65dfa5017c01fe8ad72f60ffee8c2c9e4f62016016733b5d06d435873b20","observation_id":"0b7d0c7d-be26-4db7-b3fb-62ccdcb65853","resolution":{"observed_at":"2026-05-23T08:17:43.764233Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1708.06733","snapshot_observed_at":"2026-08-12T05:07:40.323369Z","title":"Badnets: Identifying vulnera- bilities in the machine learning model supply chain,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2412.00746","last_updated":"2024-12-01T09:52:48Z","snapshot_observed_at":"2026-08-19T13:50:33.499116Z","submitted_at":"2024-12-01T09:52:48Z","title":"BDefects4NN: A Backdoor Defect Database for Controlled Localization Studies in Neural Networks","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-12T05:07:40.323369Z"},"links":{"cited_paper":"/paper/1708.06733","citing_paper":"/paper/2412.00746"},"observation_digest":"sha256:ed5ea93776514d8fd94efa89f699c219c5acc3b3ed61665461076099efde67b1","observation_id":"4105f32a-e480-4de6-a045-ac00bc41737a","resolution":{"observed_at":"2026-08-12T05:07:40.323369Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1708.06733","snapshot_observed_at":"2026-08-11T21:56:13.837748Z","title":"CoRRabs/1708.06733 (2017)","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2412.03993","last_updated":"2024-12-05T09:14:50Z","snapshot_observed_at":"2026-08-14T12:44:24.785355Z","submitted_at":"2024-12-05T09:14:50Z","title":"LaserGuider: A Laser Based Physical Backdoor Attack against Deep Neural Networks","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-11T21:56:13.837748Z"},"links":{"cited_paper":"/paper/1708.06733","citing_paper":"/paper/2412.03993"},"observation_digest":"sha256:4c018742be79d7d9b59c74add9712e46e5dd708b0d40070c7a4ded06cae7ddcf","observation_id":"4dff1168-b78f-4908-bc8e-401a2952e8bb","resolution":{"observed_at":"2026-08-11T21:56:13.837748Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1708.06733","snapshot_observed_at":"2026-08-11T21:07:43.348901Z","title":"Badnets: Identifying vulnerabilities in the machine learning model supply chain","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2412.05010","last_updated":"2024-12-06T13:03:22Z","snapshot_observed_at":"2026-08-14T22:12:11.554148Z","submitted_at":"2024-12-06T13:03:22Z","title":"Backdooring Outlier Detection Methods: A Novel Attack Approach","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-11T21:07:43.348901Z"},"links":{"cited_paper":"/paper/1708.06733","citing_paper":"/paper/2412.05010"},"observation_digest":"sha256:44bd4015fa8435811022350b8fe9f3e2228261a257dec6687806c8890bb58ad8","observation_id":"75861631-31ce-4b09-b127-a0e0c41bf12d","resolution":{"observed_at":"2026-08-11T21:07:43.348901Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1708.06733","snapshot_observed_at":"2026-08-11T20:53:24.457380Z","title":null,"venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2412.05152","last_updated":"2024-12-06T16:10:13Z","snapshot_observed_at":"2026-08-18T00:28:11.674764Z","submitted_at":"2024-12-06T16:10:13Z","title":"Navigating Shortcuts, Spurious Correlations, and Confounders: From Origins via Detection to Mitigation","version":1},"reference_index":64,"source":"pdf_text","source_observed_at":"2026-08-11T20:53:24.457380Z"},"links":{"cited_paper":"/paper/1708.06733","citing_paper":"/paper/2412.05152"},"observation_digest":"sha256:80f232ad60da36fc9ab1513c5fd2895addc9872e4f51bb41c1a0fb4754cbdb5b","observation_id":"e7dc56f5-ceb5-43d4-a673-1fe533972681","resolution":{"observed_at":"2026-08-11T20:53:24.457380Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1708.06733","snapshot_observed_at":"2026-08-11T20:30:10.226536Z","title":"Tianyu Gu, Brendan Dolan-Gavitt, and Siddharth Garg","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2412.05734","last_updated":"2025-08-08T09:27:21Z","snapshot_observed_at":"2026-08-19T14:08:58.701649Z","submitted_at":"2024-12-07T20:09:01Z","title":"LeakAgent: RL-based Red-teaming Agent for LLM Privacy Leakage","version":2},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-11T20:30:10.226536Z"},"links":{"cited_paper":"/paper/1708.06733","citing_paper":"/paper/2412.05734"},"observation_digest":"sha256:ee8f65ebf27c47fdb441f9429b01b9d488a8af24d98093c8fe4a66ceab2ddfe1","observation_id":"e2205c4c-40c8-447a-b569-9040e9812273","resolution":{"observed_at":"2026-08-11T20:30:10.226536Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1708.06733","snapshot_observed_at":"2026-08-11T20:00:28.631573Z","title":"Dolan-Gavitt, S","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2412.06219","last_updated":"2024-12-09T05:30:25Z","snapshot_observed_at":"2026-08-17T22:02:05.319154Z","submitted_at":"2024-12-09T05:30:25Z","title":"Data Free Backdoor Attacks","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-11T20:00:28.631573Z"},"links":{"cited_paper":"/paper/1708.06733","citing_paper":"/paper/2412.06219"},"observation_digest":"sha256:552c065c47af20bf26244f986c44adb47674c3f83164d0f99078fcde515c65f9","observation_id":"05bb18e0-32ef-4f8a-a0d5-5036b28485c8","resolution":{"observed_at":"2026-08-11T20:00:28.631573Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1708.06733","snapshot_observed_at":"2026-08-11T19:02:19.708598Z","title":null,"venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2412.07277","last_updated":"2025-02-21T07:51:06Z","snapshot_observed_at":"2026-08-19T12:10:57.158003Z","submitted_at":"2024-12-10T08:07:19Z","title":"Backdoor Attacks against No-Reference Image Quality Assessment Models via a Scalable Trigger","version":3},"reference_index":15,"source":"arxiv_source","source_observed_at":"2026-08-11T19:02:19.708598Z"},"links":{"cited_paper":"/paper/1708.06733","citing_paper":"/paper/2412.07277"},"observation_digest":"sha256:cc532f05928b2445df4d06072ab64c60b56c0d2cddf648d31e80745d222e4e0a","observation_id":"f2d0f092-447f-4a52-bd37-c2bac77448ca","resolution":{"observed_at":"2026-08-11T19:02:19.708598Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1708.06733","snapshot_observed_at":"2026-08-11T18:51:07.280699Z","title":null,"venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2412.07511","last_updated":"2024-12-14T10:36:04Z","snapshot_observed_at":"2026-08-16T14:31:06.829814Z","submitted_at":"2024-12-10T13:48:11Z","title":"Stealthy and Robust Backdoor Attack against 3D Point Clouds through Additional Point Features","version":2},"reference_index":10,"source":"arxiv_source","source_observed_at":"2026-08-11T18:51:07.280699Z"},"links":{"cited_paper":"/paper/1708.06733","citing_paper":"/paper/2412.07511"},"observation_digest":"sha256:f7b572672a57930fd773209c7109f6dbaf5e35b4b82d75d95809f766b4788776","observation_id":"d9c25494-f5a3-46fa-a8ba-97a529e47015","resolution":{"observed_at":"2026-08-11T18:51:07.280699Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1708.06733","snapshot_observed_at":"2026-08-11T17:24:25.910669Z","title":"Badnets: Identifying vulnerabilities in the machine learning model supply chain","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2412.08969","last_updated":"2024-12-16T03:34:55Z","snapshot_observed_at":"2026-08-18T22:50:23.228030Z","submitted_at":"2024-12-12T06:04:20Z","title":"Deep Learning Model Security: Threats and Defenses","version":2},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-11T17:24:25.910669Z"},"links":{"cited_paper":"/paper/1708.06733","citing_paper":"/paper/2412.08969"},"observation_digest":"sha256:2dc24b33047df6a776a9f69d6912d066b22cdadfeb9a2b735dc431c1b2f6cdd1","observation_id":"55f7a838-fd33-48a9-a59d-cbfaa2abce7b","resolution":{"observed_at":"2026-08-11T17:24:25.910669Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1708.06733","snapshot_observed_at":"2026-08-11T16:39:23.378613Z","title":"Badnets: Identifying vulnerabilities in the machine learning model supply chain","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2412.09933","last_updated":"2024-12-13T07:39:26Z","snapshot_observed_at":"2026-08-15T02:56:06.317991Z","submitted_at":"2024-12-13T07:39:26Z","title":"Active Poisoning: Efficient Backdoor Attacks on Transfer Learning-Based Brain-Computer Interfaces","version":1},"reference_index":25,"source":"arxiv_source","source_observed_at":"2026-08-11T16:39:23.378613Z"},"links":{"cited_paper":"/paper/1708.06733","citing_paper":"/paper/2412.09933"},"observation_digest":"sha256:b0c252a3c3bcfc69d302ae2bd425e3701acbf9d07aa5e2a2e4026260344cc0ae","observation_id":"7dc45f49-85b5-4f84-b095-a0a06e8f61a0","resolution":{"observed_at":"2026-08-11T16:39:23.378613Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1708.06733","snapshot_observed_at":"2026-08-11T15:48:25.991577Z","title":"Bad- nets: Identifying vulnerabilities in the machine learning model supply chain","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2412.10681","last_updated":"2024-12-19T10:59:24Z","snapshot_observed_at":"2026-08-20T22:23:00.709592Z","submitted_at":"2024-12-14T05:01:46Z","title":"One Pixel is All I Need","version":2},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-11T15:48:25.991577Z"},"links":{"cited_paper":"/paper/1708.06733","citing_paper":"/paper/2412.10681"},"observation_digest":"sha256:6a270f612d6c06e178be1ec3456d966d52a7bb08302971c2770a24870269beb1","observation_id":"117e5c92-7527-4511-885f-157d419bac20","resolution":{"observed_at":"2026-08-11T15:48:25.991577Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1708.06733","snapshot_observed_at":"2026-08-11T15:29:12.840125Z","title":"BadNets: Identifying vulnerabilities in the machine learning model supply chain","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2412.10953","last_updated":"2024-12-14T20:14:44Z","snapshot_observed_at":"2026-08-20T14:20:14.208337Z","submitted_at":"2024-12-14T20:14:44Z","title":"Optimizing AI-Assisted Code Generation","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-11T15:29:12.840125Z"},"links":{"cited_paper":"/paper/1708.06733","citing_paper":"/paper/2412.10953"},"observation_digest":"sha256:fc4873555436f606144f8ace7ddce3a79455aadeddd08251cdd68f8f0ec3f06e","observation_id":"d39342aa-ff2a-4d6c-827e-f3af4dd33428","resolution":{"observed_at":"2026-08-11T15:29:12.840125Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1708.06733","snapshot_observed_at":"2026-08-11T14:59:27.825270Z","title":"Bad- nets: Identifying vulnerabilities in the machine learning model supply chain","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2412.11441","last_updated":"2025-02-28T04:36:39Z","snapshot_observed_at":"2026-08-20T03:27:57.226523Z","submitted_at":"2024-12-16T04:47:55Z","title":"UIBDiffusion: Universal Imperceptible Backdoor Attack for Diffusion Models","version":3},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-11T14:59:27.825270Z"},"links":{"cited_paper":"/paper/1708.06733","citing_paper":"/paper/2412.11441"},"observation_digest":"sha256:f048fbd3f4e6f60eb34274bf7165c65f4f2c4e0f2fd7d59d919f43c1209bf2c2","observation_id":"232ec3b8-5d33-4f18-ab20-cb67099548fd","resolution":{"observed_at":"2026-08-11T14:59:27.825270Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1708.06733","snapshot_observed_at":"2026-08-11T14:57:41.125271Z","title":"Badnets: Identifying vulnera- bilities in the machine learning model supply chain,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2412.11476","last_updated":"2024-12-16T06:40:25Z","snapshot_observed_at":"2026-08-19T13:51:06.998979Z","submitted_at":"2024-12-16T06:40:25Z","title":"Vertical Federated Unlearning via Backdoor Certification","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-11T14:57:41.125271Z"},"links":{"cited_paper":"/paper/1708.06733","citing_paper":"/paper/2412.11476"},"observation_digest":"sha256:20a44e611b5caf5051892c5665af2b55e02357551455adf7f190a8bb3452b703","observation_id":"a091a191-9b00-498e-993d-5b3990d182f8","resolution":{"observed_at":"2026-08-11T14:57:41.125271Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1708.06733","snapshot_observed_at":"2026-08-11T13:37:58.745218Z","title":null,"venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2412.13021","last_updated":"2024-12-17T15:41:36Z","snapshot_observed_at":"2026-08-14T18:55:52.254963Z","submitted_at":"2024-12-17T15:41:36Z","title":"Queries, Representation & Detection: The Next 100 Model Fingerprinting Schemes","version":1},"reference_index":11,"source":"arxiv_source","source_observed_at":"2026-08-11T13:37:58.745218Z"},"links":{"cited_paper":"/paper/1708.06733","citing_paper":"/paper/2412.13021"},"observation_digest":"sha256:f91639091c89c95bf283f9aefc2d9bf06fe711694e771b7d7ae9e3c43b031d9d","observation_id":"10c57bfd-bf20-4203-a68f-2c4536245e6c","resolution":{"observed_at":"2026-08-11T13:37:58.745218Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1708.06733","snapshot_observed_at":"2026-08-11T13:19:06.556452Z","title":null,"venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2412.13324","last_updated":"2024-12-17T20:52:56Z","snapshot_observed_at":"2026-08-17T20:30:50.322200Z","submitted_at":"2024-12-17T20:52:56Z","title":"BadSAD: Clean-Label Backdoor Attacks against Deep Semi-Supervised Anomaly Detection","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-11T13:19:06.556452Z"},"links":{"cited_paper":"/paper/1708.06733","citing_paper":"/paper/2412.13324"},"observation_digest":"sha256:79be5264833a7812eb0fc1899c90c1130fe645744508cc10d2a38770529eb72d","observation_id":"027f8116-2788-4ce7-a60a-f184434e4a1e","resolution":{"observed_at":"2026-08-11T13:19:06.556452Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1708.06733","snapshot_observed_at":"2026-08-11T12:40:57.014524Z","title":null,"venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2412.13939","last_updated":"2024-12-18T15:21:53Z","snapshot_observed_at":"2026-08-18T01:17:56.389192Z","submitted_at":"2024-12-18T15:21:53Z","title":"Security and Privacy of Digital Twins for Advanced Manufacturing: A Survey","version":1},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-11T12:40:57.014524Z"},"links":{"cited_paper":"/paper/1708.06733","citing_paper":"/paper/2412.13939"},"observation_digest":"sha256:24287660e3c5de481f2dda049a7bcb08085a8cc384382b5db0f716a09533ac43","observation_id":"d9fd9b20-b0c2-48f5-a918-bb65a74f5411","resolution":{"observed_at":"2026-08-11T12:40:57.014524Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1708.06733","snapshot_observed_at":"2026-08-11T11:25:10.491483Z","title":null,"venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2412.15503","last_updated":"2024-12-20T02:32:55Z","snapshot_observed_at":"2026-08-17T22:16:10.441958Z","submitted_at":"2024-12-20T02:32:55Z","title":"Meme Trojan: Backdoor Attacks Against Hateful Meme Detection via Cross-Modal Triggers","version":1},"reference_index":17,"source":"arxiv_source","source_observed_at":"2026-08-11T11:25:10.491483Z"},"links":{"cited_paper":"/paper/1708.06733","citing_paper":"/paper/2412.15503"},"observation_digest":"sha256:5d2ccc5e7da3ff68a350088ef11bbe0ad6bdf1097b866078aff91defab81e5b8","observation_id":"a256e3c9-f541-4e3e-84e1-f1df75a884f8","resolution":{"observed_at":"2026-08-11T11:25:10.491483Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1708.06733","snapshot_observed_at":"2026-08-11T05:31:36.468266Z","title":"arXiv preprint arXiv:1708.06733 (2017)","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2412.17531","last_updated":"2025-07-18T02:44:07Z","snapshot_observed_at":"2026-08-20T12:32:39.348611Z","submitted_at":"2024-12-23T12:56:30Z","title":"Invisible Textual Backdoor Attacks based on Dual-Trigger","version":3},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-11T05:31:36.468266Z"},"links":{"cited_paper":"/paper/1708.06733","citing_paper":"/paper/2412.17531"},"observation_digest":"sha256:f0821c5a0084a620a67985e9abd991c8db49ae5587d310909d2124d04e77bb3f","observation_id":"42fc61bd-6bcd-4450-9b92-d772ca16974d","resolution":{"observed_at":"2026-08-11T05:31:36.468266Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1708.06733","snapshot_observed_at":"2026-08-10T23:18:18.151496Z","title":"Badnets: Identifying vulnerabilities in the machinelearningmodelsupplychain","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2412.20768","last_updated":"2024-12-30T07:37:06Z","snapshot_observed_at":"2026-08-14T14:35:49.877494Z","submitted_at":"2024-12-30T07:37:06Z","title":"Sample Correlation for Fingerprinting Deep Face Recognition","version":1},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-10T23:18:18.151496Z"},"links":{"cited_paper":"/paper/1708.06733","citing_paper":"/paper/2412.20768"},"observation_digest":"sha256:78856c5c22b8583de93c17bb7c3c0454932e80f63422c02c8ef35cc5fc434f97","observation_id":"ce16d307-84f2-464e-81f2-2d1d3a8a81d8","resolution":{"observed_at":"2026-08-10T23:18:18.151496Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1708.06733","snapshot_observed_at":"2026-08-10T23:06:54.611449Z","title":"Badnets: Identifying vulnerabilities in the machine learning model supply chain","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2412.21061","last_updated":"2025-05-14T04:17:54Z","snapshot_observed_at":"2026-08-19T14:02:25.617738Z","submitted_at":"2024-12-30T16:30:50Z","title":"BridgePure: Limited Protection Leakage Can Break Black-Box Data Protection","version":2},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-10T23:06:54.611449Z"},"links":{"cited_paper":"/paper/1708.06733","citing_paper":"/paper/2412.21061"},"observation_digest":"sha256:050acdc98683b6a419aed6ddf5b6218351260e471f229e6b3bf2229437dffcd9","observation_id":"af89330f-3db2-4f71-8e26-068b1b261599","resolution":{"observed_at":"2026-08-10T23:06:54.611449Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1708.06733","snapshot_observed_at":"2026-08-10T22:39:41.745444Z","title":null,"venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2501.01090","last_updated":"2025-01-02T06:23:51Z","snapshot_observed_at":"2026-08-18T11:38:51.217803Z","submitted_at":"2025-01-02T06:23:51Z","title":"HoneypotNet: Backdoor Attacks Against Model Extraction","version":1},"reference_index":10,"source":"arxiv_source","source_observed_at":"2026-08-10T22:39:41.745444Z"},"links":{"cited_paper":"/paper/1708.06733","citing_paper":"/paper/2501.01090"},"observation_digest":"sha256:23ebcb54d263a3d453320c455e10ceadecff9cdc488e7fe567d1be74047078ee","observation_id":"0fb45425-a1ae-4f87-a1f6-c55ee616a413","resolution":{"observed_at":"2026-08-10T22:39:41.745444Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1708.06733","snapshot_observed_at":"2026-08-10T18:07:46.822619Z","title":"URL https://arxiv.org/abs/1708.06733","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2501.11621","last_updated":"2025-01-20T17:36:04Z","snapshot_observed_at":"2026-08-14T11:36:00.851001Z","submitted_at":"2025-01-20T17:36:04Z","title":"Trojan Detection Through Pattern Recognition for Large Language Models","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-10T18:07:46.822619Z"},"links":{"cited_paper":"/paper/1708.06733","citing_paper":"/paper/2501.11621"},"observation_digest":"sha256:e6533ce1d773c98c9f3a32ee64b4a4dd4aadad9b0b2f7864808f557272d4d6bc","observation_id":"d713d456-61ad-4ac1-9022-500f149fb3e9","resolution":{"observed_at":"2026-08-10T18:07:46.822619Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1708.06733","snapshot_observed_at":"2026-08-10T17:57:28.739657Z","title":"Badnets: Identifying vulnerabilities in the machine learning model supply chain,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2501.11795","last_updated":"2025-01-21T00:07:55Z","snapshot_observed_at":"2026-08-18T03:03:55.550405Z","submitted_at":"2025-01-21T00:07:55Z","title":"Provably effective detection of effective data poisoning attacks","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-10T17:57:28.739657Z"},"links":{"cited_paper":"/paper/1708.06733","citing_paper":"/paper/2501.11795"},"observation_digest":"sha256:dd059b44c717421bf2dfa30935b143f12b1b2564f7a80d5625b4f7fddfd61b4f","observation_id":"a680e1c4-530d-4c9e-a710-bd174e830721","resolution":{"observed_at":"2026-08-10T17:57:28.739657Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1708.06733","snapshot_observed_at":"2026-08-10T14:41:11.200947Z","title":null,"venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2501.15101","last_updated":"2025-01-25T06:43:20Z","snapshot_observed_at":"2026-08-16T04:21:40.289678Z","submitted_at":"2025-01-25T06:43:20Z","title":"Comprehensive Evaluation of Cloaking Backdoor Attacks on Object Detector in Real-World","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-10T14:41:11.200947Z"},"links":{"cited_paper":"/paper/1708.06733","citing_paper":"/paper/2501.15101"},"observation_digest":"sha256:89fe3b36256288c63c30f2853943ecc027bb3a2d73a1fd41c1021cd9c2c7c478","observation_id":"e05e2d9b-b863-49eb-90d7-e7dbefaeb7e2","resolution":{"observed_at":"2026-08-10T14:41:11.200947Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1708.06733","snapshot_observed_at":"2026-08-09T18:17:40.168095Z","title":"arXiv preprint arXiv:1708.06733 (2017)","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2502.00646","last_updated":"2025-02-02T03:24:24Z","snapshot_observed_at":"2026-08-13T20:12:42.503834Z","submitted_at":"2025-02-02T03:24:24Z","title":"TrojanTime: Backdoor Attacks on Time Series Classification","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-09T18:17:40.168095Z"},"links":{"cited_paper":"/paper/1708.06733","citing_paper":"/paper/2502.00646"},"observation_digest":"sha256:7de32b19ee862c0f0156eb4ba5747b7cc412add70cea942eae6a068f3feb6ded","observation_id":"39ddd5c0-ccf4-4883-8f10-b4331c3a559f","resolution":{"observed_at":"2026-08-09T18:17:40.168095Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1708.06733","snapshot_observed_at":"2026-08-09T15:36:27.608322Z","title":"Badnets: Identifying vulnerabilities in the machine learning model supply chain","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2502.01385","last_updated":"2025-02-10T08:04:21Z","snapshot_observed_at":"2026-08-15T16:31:13.710742Z","submitted_at":"2025-02-03T14:21:05Z","title":"Detecting Backdoor Samples in Contrastive Language Image Pretraining","version":2},"reference_index":38,"source":"arxiv_source","source_observed_at":"2026-08-09T15:36:27.608322Z"},"links":{"cited_paper":"/paper/1708.06733","citing_paper":"/paper/2502.01385"},"observation_digest":"sha256:48fcc84ecea51881aa7fbbf82348c2a1611a73d86fd85f0390ac4d040169eeed","observation_id":"cb63086e-b6d2-4c10-9663-e71c5f0864aa","resolution":{"observed_at":"2026-08-09T15:36:27.608322Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1708.06733","snapshot_observed_at":"2026-08-09T00:45:23.206674Z","title":"Badnets: Identifying vulnerabilities in the ma- chine learning model supply chain","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2502.03801","last_updated":"2025-02-06T06:05:00Z","snapshot_observed_at":"2026-08-17T22:14:27.514451Z","submitted_at":"2025-02-06T06:05:00Z","title":"SoK: Benchmarking Poisoning Attacks and Defenses in Federated Learning","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-09T00:45:23.206674Z"},"links":{"cited_paper":"/paper/1708.06733","citing_paper":"/paper/2502.03801"},"observation_digest":"sha256:adeda014d84b00124de7be3b257919d68af495c4b75acf9b622f793049a7ec04","observation_id":"961ec327-e2ca-48b1-8fe2-c6a6e4786e9c","resolution":{"observed_at":"2026-08-09T00:45:23.206674Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1708.06733","snapshot_observed_at":"2026-08-09T00:49:59.988216Z","title":"Available: https://arxiv.org/abs/1708.06733","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2502.05224","last_updated":"2025-02-06T04:43:05Z","snapshot_observed_at":"2026-08-13T00:35:04.918294Z","submitted_at":"2025-02-06T04:43:05Z","title":"A Survey on Backdoor Threats in Large Language Models (LLMs): Attacks, Defenses, and Evaluations","version":1},"reference_index":2019,"source":"pdf_text","source_observed_at":"2026-08-09T00:49:59.988216Z"},"links":{"cited_paper":"/paper/1708.06733","citing_paper":"/paper/2502.05224"},"observation_digest":"sha256:c1197f7cf2a04ba3a08abcee766fc2970995464e93424fc080df68cc40a78f14","observation_id":"08e7d47b-336b-463e-a05f-c78ca8909b67","resolution":{"observed_at":"2026-08-09T00:49:59.988216Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1708.06733","snapshot_observed_at":"2026-08-08T17:08:55.129946Z","title":"A Cross-Stack Approach Towards Defending Against Cryptojacking","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2502.10439","last_updated":"2025-02-09T19:26:47Z","snapshot_observed_at":"2026-08-20T02:34:39.637598Z","submitted_at":"2025-02-09T19:26:47Z","title":"Crypto Miner Attack: GPU Remote Code Execution Attacks","version":1},"reference_index":2017,"source":"pdf_text","source_observed_at":"2026-08-08T17:08:55.129946Z"},"links":{"cited_paper":"/paper/1708.06733","citing_paper":"/paper/2502.10439"},"observation_digest":"sha256:b7ee0d367f34396a480a5295c7fd2699a31f1012483f3556e00341b2f651abf2","observation_id":"8e912f06-c522-4b99-b798-11177322fe87","resolution":{"observed_at":"2026-08-08T17:08:55.129946Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"cited_work":{"arxiv_id":"1708.06733","doi":null,"metadata_source":"pith","pith_arxiv_id":"1708.06733","snapshot_observed_at":"2026-07-11T00:47:43.661742Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","venue":"cs.CR","work_id":"7b1cd3ac-9abd-4579-8d13-c75d30c83a5f","year":2017},"citing_paper":{"arxiv_id":"2504.00446","last_updated":"2026-04-05T08:03:35Z","snapshot_observed_at":"2026-08-13T14:52:27.707325Z","submitted_at":"2025-04-01T05:58:14Z","title":"Exposing the Ghost in the Transformer: Abnormal Detection for Large Language Models via Hidden State Forensics","version":2},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-05-22T22:27:18.533162Z"},"links":{"cited_paper":"/paper/1708.06733","citing_paper":"/paper/2504.00446"},"observation_digest":"sha256:c2bdd5b2d3545f62f349defbd4f309e86f5b2552a8b692503f8bed00d99d5b6b","observation_id":"de4a8d30-208f-4f2f-9eb4-de4f304c7d21","resolution":{"observed_at":"2026-05-22T22:32:12.900891Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"cited_work":{"arxiv_id":"1708.06733","doi":null,"metadata_source":"pith","pith_arxiv_id":"1708.06733","snapshot_observed_at":"2026-07-11T00:47:43.661742Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","venue":"cs.CR","work_id":"7b1cd3ac-9abd-4579-8d13-c75d30c83a5f","year":2017},"citing_paper":{"arxiv_id":"2504.05902","last_updated":"2026-04-13T15:36:03Z","snapshot_observed_at":"2026-07-06T21:06:03.653624Z","submitted_at":"2025-04-08T11:01:07Z","title":"Defending against Backdoor Attacks via Module Switching","version":2},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-05-22T20:28:24.169272Z"},"links":{"cited_paper":"/paper/1708.06733","citing_paper":"/paper/2504.05902"},"observation_digest":"sha256:86cde43c301f510a3e05e31fcd58a83bc8a6cb8f39c6bd311a6640ef584391b8","observation_id":"5ffe572a-f969-4d2d-99ae-807b6ee916ab","resolution":{"observed_at":"2026-05-22T20:32:04.757160Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1708.06733","snapshot_observed_at":"2026-08-16T11:17:20.519150Z","title":"[GLDG19] Tianyu Gu, Kang Liu, Brendan Dolan-Gavitt, and Siddharth Garg","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2504.16270","last_updated":"2025-04-22T21:06:41Z","snapshot_observed_at":"2026-08-20T11:42:59.935123Z","submitted_at":"2025-04-22T21:06:41Z","title":"A Geometric Approach to Problems in Optimization and Data Science","version":1},"reference_index":2017,"source":"pdf_text","source_observed_at":"2026-08-16T11:17:20.519150Z"},"links":{"cited_paper":"/paper/1708.06733","citing_paper":"/paper/2504.16270"},"observation_digest":"sha256:0b2d2040488a7d5412ac2c38134042bb4c4be0bb640d5c76d083501a5be58bcb","observation_id":"7cc06722-b2bf-4fa8-b6c0-dcba6d4febe9","resolution":{"observed_at":"2026-08-16T11:17:20.519150Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1708.06733","snapshot_observed_at":"2026-08-16T10:38:51.565413Z","title":null,"venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2504.18598","last_updated":"2025-04-29T02:23:57Z","snapshot_observed_at":"2026-08-18T17:46:15.687899Z","submitted_at":"2025-04-24T16:42:38Z","title":"BadMoE: Backdooring Mixture-of-Experts LLMs via Optimizing Routing Triggers and Infecting Dormant Experts","version":2},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-16T10:38:51.565413Z"},"links":{"cited_paper":"/paper/1708.06733","citing_paper":"/paper/2504.18598"},"observation_digest":"sha256:ad3300072d7f728b6b37342092065b90a753a97605832247dfa619d6aa986b6e","observation_id":"68ca3925-f2c6-49cb-b825-5d1c38d7caac","resolution":{"observed_at":"2026-08-16T10:38:51.565413Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1708.06733","snapshot_observed_at":"2026-08-16T05:25:31.641036Z","title":"Bad- nets: Identifying vulnerabilities in the machine learning model supply chain","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2504.21072","last_updated":"2026-06-10T10:40:13Z","snapshot_observed_at":"2026-08-17T07:57:10.756792Z","submitted_at":"2025-04-29T16:13:06Z","title":"Erased but Not Forgotten: How Backdoors Compromise Concept Erasure","version":3},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-16T05:25:31.641036Z"},"links":{"cited_paper":"/paper/1708.06733","citing_paper":"/paper/2504.21072"},"observation_digest":"sha256:0911af1233f4ac598a201de2880054a8b5a3a2521649ef38374c590d47edf365","observation_id":"aafa74be-4ad4-4d13-8f20-a18f283e4a28","resolution":{"observed_at":"2026-08-16T05:25:31.641036Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1708.06733","snapshot_observed_at":"2026-08-16T04:28:00.386296Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2505.01177","last_updated":"2025-05-02T10:35:26Z","snapshot_observed_at":"2026-08-16T14:20:05.929905Z","submitted_at":"2025-05-02T10:35:26Z","title":"LLM Security: Vulnerabilities, Attacks, Defenses, and Countermeasures","version":1},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-16T04:28:00.386296Z"},"links":{"cited_paper":"/paper/1708.06733","citing_paper":"/paper/2505.01177"},"observation_digest":"sha256:77b307b752241c8eaaa277044d0873ca747c01d998303a72dffe431cf3c559bf","observation_id":"73df09df-8403-41ec-96a9-75f007cf4fce","resolution":{"observed_at":"2026-08-16T04:28:00.386296Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1708.06733","snapshot_observed_at":"2026-08-16T00:03:02.785416Z","title":"Badnets: Identifying vulnerabil- ities in the machine learning model supply chain,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2505.03084","last_updated":"2025-05-06T00:41:16Z","snapshot_observed_at":"2026-08-16T13:40:54.744538Z","submitted_at":"2025-05-06T00:41:16Z","title":"Adversarial Attacks in Multimodal Systems: A Practitioner's Survey","version":1},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-08-16T00:03:02.785416Z"},"links":{"cited_paper":"/paper/1708.06733","citing_paper":"/paper/2505.03084"},"observation_digest":"sha256:f27499228ae6670a864537eba029f54339ffccb9aa6e98281d8566e8be646722","observation_id":"71a328c3-3335-419a-afaf-28b734c9cf89","resolution":{"observed_at":"2026-08-16T00:03:02.785416Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1708.06733","snapshot_observed_at":"2026-08-15T23:54:42.751300Z","title":"Badnets: Identifying vulnerabilities in the ma- chine learning model supply chain","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2505.03501","last_updated":"2025-05-06T13:07:57Z","snapshot_observed_at":"2026-08-16T00:40:35.941805Z","submitted_at":"2025-05-06T13:07:57Z","title":"BadLingual: A Novel Lingual-Backdoor Attack against Large Language Models","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-15T23:54:42.751300Z"},"links":{"cited_paper":"/paper/1708.06733","citing_paper":"/paper/2505.03501"},"observation_digest":"sha256:65f6b334ab21d1e6345661a44d9487cef04f4516a4bdc79947a2b5a9918899ac","observation_id":"905e04a7-3aa0-4767-b5ab-27e8cd475eb6","resolution":{"observed_at":"2026-08-15T23:54:42.751300Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1708.06733","snapshot_observed_at":"2026-08-15T23:45:04.232984Z","title":"Badnets: Identifying vulnera- bilities in the machine learning model supply chain,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2505.04015","last_updated":"2025-05-06T23:26:25Z","snapshot_observed_at":"2026-08-15T23:37:41.210366Z","submitted_at":"2025-05-06T23:26:25Z","title":"MergeGuard: Efficient Thwarting of Trojan Attacks in Machine Learning Models","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-15T23:45:04.232984Z"},"links":{"cited_paper":"/paper/1708.06733","citing_paper":"/paper/2505.04015"},"observation_digest":"sha256:d0378c52501d5c46194677acd1292be947b59ee0607b3ed819e650b48361db64","observation_id":"a9fe1caa-675d-4326-b414-5240e1bfc1d7","resolution":{"observed_at":"2026-08-15T23:45:04.232984Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1708.06733","snapshot_observed_at":"2026-08-15T23:23:59.329233Z","title":null,"venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2505.04977","last_updated":"2025-06-03T17:16:24Z","snapshot_observed_at":"2026-08-19T19:50:35.040821Z","submitted_at":"2025-05-08T06:30:46Z","title":"ChainMarks: Securing DNN Watermark with Cryptographic Chain","version":2},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-15T23:23:59.329233Z"},"links":{"cited_paper":"/paper/1708.06733","citing_paper":"/paper/2505.04977"},"observation_digest":"sha256:8422e8a5346be19fc92e6511125da59a889ba7a7036bc0168696ad025f3c9a77","observation_id":"2c34914e-a191-40ba-ae91-f396c54e6f21","resolution":{"observed_at":"2026-08-15T23:23:59.329233Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1708.06733","snapshot_observed_at":"2026-08-15T23:13:47.281490Z","title":"Badnets: Identifying vulnerabilities in the machine learning model supply chain","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2505.05279","last_updated":"2025-05-08T14:26:00Z","snapshot_observed_at":"2026-08-18T22:51:03.376725Z","submitted_at":"2025-05-08T14:26:00Z","title":"MTL-UE: Learning to Learn Nothing for Multi-Task Learning","version":1},"reference_index":23,"source":"arxiv_source","source_observed_at":"2026-08-15T23:13:47.281490Z"},"links":{"cited_paper":"/paper/1708.06733","citing_paper":"/paper/2505.05279"},"observation_digest":"sha256:a027cdaba387eee9a11a2d3f4b61625f0964de190e5920581ab846e8e5459286","observation_id":"e109bd10-abad-4598-83de-193bfa62fbba","resolution":{"observed_at":"2026-08-15T23:13:47.281490Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"cited_work":{"arxiv_id":"1708.06733","doi":null,"metadata_source":"pith","pith_arxiv_id":"1708.06733","snapshot_observed_at":"2026-07-11T00:47:43.661742Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","venue":"cs.CR","work_id":"7b1cd3ac-9abd-4579-8d13-c75d30c83a5f","year":2017},"citing_paper":{"arxiv_id":"2505.05707","last_updated":"2026-05-11T02:02:35Z","snapshot_observed_at":"2026-08-15T02:18:36.568916Z","submitted_at":"2025-05-09T00:55:12Z","title":"Crowding Out The Noise: Algorithmic Collective Action Under Differential Privacy","version":2},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-05-22T17:12:02.103644Z"},"links":{"cited_paper":"/paper/1708.06733","citing_paper":"/paper/2505.05707"},"observation_digest":"sha256:4ce4326d4917c49fb7bd04401a62b10b44b50032a0188a573dfc0175c64790ac","observation_id":"c3ca773d-2dd6-4b21-82f4-50baccf996e0","resolution":{"observed_at":"2026-05-22T17:14:59.816290Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1708.06733","snapshot_observed_at":"2026-08-15T22:05:25.585685Z","title":"Bad- nets: Identifying vulnerabilities in the machine learning model supply chain.arXiv preprint arXiv:1708.06733, 2017","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2505.08255","last_updated":"2025-05-13T06:09:34Z","snapshot_observed_at":"2026-08-20T20:49:49.300438Z","submitted_at":"2025-05-13T06:09:34Z","title":"Where the Devil Hides: Deepfake Detectors Can No Longer Be Trusted","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-15T22:05:25.585685Z"},"links":{"cited_paper":"/paper/1708.06733","citing_paper":"/paper/2505.08255"},"observation_digest":"sha256:07e8b707476e853eef01d026f9fab85e4363a62010c7287c43bd2d7a30549e94","observation_id":"c9e2d69b-23cb-4930-b813-805ac8d59355","resolution":{"observed_at":"2026-08-15T22:05:25.585685Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1708.06733","snapshot_observed_at":"2026-08-15T22:26:12.401847Z","title":"Badnets: Identifying vulnerabilities in the machine learning model supply chain","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2505.08809","last_updated":"2025-05-26T09:54:13Z","snapshot_observed_at":"2026-08-20T03:27:56.731879Z","submitted_at":"2025-05-12T06:40:23Z","title":"MixBridge: Heterogeneous Image-to-Image Backdoor Attack through Mixture of Schr\\\"odinger Bridges","version":2},"reference_index":16,"source":"arxiv_source","source_observed_at":"2026-08-15T22:26:12.401847Z"},"links":{"cited_paper":"/paper/1708.06733","citing_paper":"/paper/2505.08809"},"observation_digest":"sha256:3da3b61fb9323e026b80f85fa97f228f03a9791eb328d24c3df61610ecc70916","observation_id":"cef82ed0-74f3-447d-8030-97180d1302f6","resolution":{"observed_at":"2026-08-15T22:26:12.401847Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"cited_work":{"arxiv_id":"1708.06733","doi":null,"metadata_source":"pith","pith_arxiv_id":"1708.06733","snapshot_observed_at":"2026-07-11T00:47:43.661742Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","venue":"cs.CR","work_id":"7b1cd3ac-9abd-4579-8d13-c75d30c83a5f","year":2017},"citing_paper":{"arxiv_id":"2505.11548","last_updated":"2026-04-09T01:58:59Z","snapshot_observed_at":"2026-08-15T19:45:08.666319Z","submitted_at":"2025-05-15T08:14:58Z","title":"One Shot Dominance: Knowledge Poisoning Attack on Retrieval-Augmented Generation Systems","version":4},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-05-22T15:19:08.867224Z"},"links":{"cited_paper":"/paper/1708.06733","citing_paper":"/paper/2505.11548"},"observation_digest":"sha256:1b4bbaa6d69bf8676fa191db957798d8c91297925c054345407301444e5cfdac","observation_id":"40c0968f-4adc-4f35-bb99-8038fc0dcacd","resolution":{"observed_at":"2026-05-22T15:21:44.811284Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1708.06733","snapshot_observed_at":"2026-08-15T20:55:43.427891Z","title":"Bad- nets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain.CoRR abs/1708.06733, 2017","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2505.11586","last_updated":"2025-05-16T17:59:53Z","snapshot_observed_at":"2026-08-21T19:28:11.583545Z","submitted_at":"2025-05-16T17:59:53Z","title":"The Ripple Effect: On Unforeseen Complications of Backdoor Attacks","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-15T20:55:43.427891Z"},"links":{"cited_paper":"/paper/1708.06733","citing_paper":"/paper/2505.11586"},"observation_digest":"sha256:51ce53486bb4cbb880b831a7506e483f3056e9ec5c70554707fc510204c18a92","observation_id":"88454457-3205-48f5-a320-a17b1aaa2d03","resolution":{"observed_at":"2026-08-15T20:55:43.427891Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1708.06733","snapshot_observed_at":"2026-08-15T20:53:12.435714Z","title":"Badnets: Identifying vulnerabilities in the machine learning model supply chain.arXiv preprint arXiv:1708.06733, 2017","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2505.11760","last_updated":"2025-05-16T23:53:33Z","snapshot_observed_at":"2026-08-19T11:02:45.073556Z","submitted_at":"2025-05-16T23:53:33Z","title":"Topology-Aware Knowledge Propagation in Decentralized Learning","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-15T20:53:12.435714Z"},"links":{"cited_paper":"/paper/1708.06733","citing_paper":"/paper/2505.11760"},"observation_digest":"sha256:1d31f3995f81cdd9e473380c907c469810807a655b278879cd44b73f64edf6d1","observation_id":"8f1f4821-c510-45d8-82de-8a205770b019","resolution":{"observed_at":"2026-08-15T20:53:12.435714Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1708.06733","snapshot_observed_at":"2026-08-15T20:46:59.179416Z","title":"Badnets: Identifying vulnerabilities in the machine learning model supply chain","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2505.12019","last_updated":"2025-05-17T14:16:47Z","snapshot_observed_at":"2026-08-20T18:18:29.666606Z","submitted_at":"2025-05-17T14:16:47Z","title":"FL-PLAS: Federated Learning with Partial Layer Aggregation for Backdoor Defense Against High-Ratio Malicious Clients","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-15T20:46:59.179416Z"},"links":{"cited_paper":"/paper/1708.06733","citing_paper":"/paper/2505.12019"},"observation_digest":"sha256:ad1f0f80d41c1eb9dc73ee9707e62cf421c8ae4b13d610276fa1a62427b820e2","observation_id":"0c12bd55-f91a-4f47-8e07-df0e95e65c6a","resolution":{"observed_at":"2026-08-15T20:46:59.179416Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1708.06733","snapshot_observed_at":"2026-08-15T20:31:40.083693Z","title":"Badnets: Identifying vulnerabilities in the machine learning model supply chain","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2505.12871","last_updated":"2025-05-19T08:57:08Z","snapshot_observed_at":"2026-08-19T09:18:50.117245Z","submitted_at":"2025-05-19T08:57:08Z","title":"Does Low Rank Adaptation Lead to Lower Robustness against Training-Time Attacks?","version":1},"reference_index":11,"source":"arxiv_source","source_observed_at":"2026-08-15T20:31:40.083693Z"},"links":{"cited_paper":"/paper/1708.06733","citing_paper":"/paper/2505.12871"},"observation_digest":"sha256:11f4870eb8baab7b603e0aaa9834dea3bc216e2fcdac85d4e3928be6f60127f0","observation_id":"9c4378d3-587a-4431-8a2f-40e99566ebb6","resolution":{"observed_at":"2026-08-15T20:31:40.083693Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1708.06733","snapshot_observed_at":"2026-08-07T15:37:52.922253Z","title":"Badnets: Identifying vulnerabilities in the machine learning model supply chain.CoRR, abs/1708.06733, 2017","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2505.14531","last_updated":"2025-05-20T15:51:17Z","snapshot_observed_at":"2026-08-10T06:26:16.191733Z","submitted_at":"2025-05-20T15:51:17Z","title":"SifterNet: A Generalized and Model-Agnostic Trigger Purification Approach","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-07T15:37:52.922253Z"},"links":{"cited_paper":"/paper/1708.06733","citing_paper":"/paper/2505.14531"},"observation_digest":"sha256:66f4119b2672fad7e6976632d397d112098d33d45b37342bb76d0e0c20befc1b","observation_id":"3a104a68-9a0a-42f2-9894-b994ad61e328","resolution":{"observed_at":"2026-08-07T15:37:52.922253Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1708.06733","snapshot_observed_at":"2026-08-07T15:25:21.571248Z","title":"Badnets: Identifying vulnera- bilities in the machine learning model supply chain,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2505.15308","last_updated":"2025-05-21T09:36:35Z","snapshot_observed_at":"2026-08-15T16:56:37.694917Z","submitted_at":"2025-05-21T09:36:35Z","title":"BadSR: Stealthy Label Backdoor Attacks on Image Super-Resolution","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-07T15:25:21.571248Z"},"links":{"cited_paper":"/paper/1708.06733","citing_paper":"/paper/2505.15308"},"observation_digest":"sha256:8ee4e7e3d93c068ca5ef0acb67a521654baf7d366ff930300b68ac045024ec00","observation_id":"baa40e47-186a-497e-a030-3465402edfe5","resolution":{"observed_at":"2026-08-07T15:25:21.571248Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1708.06733","snapshot_observed_at":"2026-08-07T15:03:37.111743Z","title":"Badnets: Identifying vulnerabilities in the machine learning model supply chain,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2505.16446","last_updated":"2025-05-22T09:34:47Z","snapshot_observed_at":"2026-08-13T20:07:08.640609Z","submitted_at":"2025-05-22T09:34:47Z","title":"Implicit Jailbreak Attacks via Cross-Modal Information Concealment on Vision-Language Models","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-07T15:03:37.111743Z"},"links":{"cited_paper":"/paper/1708.06733","citing_paper":"/paper/2505.16446"},"observation_digest":"sha256:e764ecf01a70c9a96f1340c56c57165e1f37b533de2db06966f57231cb5f96ea","observation_id":"87572535-3632-4822-951a-c71eb7bf03d5","resolution":{"observed_at":"2026-08-07T15:03:37.111743Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1708.06733","snapshot_observed_at":"2026-08-07T15:31:33.771537Z","title":"Badnets: Identifying vulnerabilities in the machine learning model supply chain,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2505.17092","last_updated":"2025-05-21T00:46:45Z","snapshot_observed_at":"2026-08-17T21:48:44.418435Z","submitted_at":"2025-05-21T00:46:45Z","title":"Covert Attacks on Machine Learning Training in Passively Secure MPC","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-07T15:31:33.771537Z"},"links":{"cited_paper":"/paper/1708.06733","citing_paper":"/paper/2505.17092"},"observation_digest":"sha256:e3a1e5a0a5a305e56f23b17acda71d11cd8acc5e96a69c5a77363b0ca3b72148","observation_id":"e76f7c75-3919-47e4-8cdd-687b8ce4b8d2","resolution":{"observed_at":"2026-08-07T15:31:33.771537Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1708.06733","snapshot_observed_at":"2026-08-07T14:16:10.384895Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain.arXiv:1708.06733 [cs], March 2019","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2505.19532","last_updated":"2026-06-24T05:39:26Z","snapshot_observed_at":"2026-08-20T20:11:54.812459Z","submitted_at":"2025-05-26T05:39:35Z","title":"Fox in the Henhouse: Supply-Chain Backdoor Attacks Against Reinforcement Learning","version":2},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-07T14:16:10.384895Z"},"links":{"cited_paper":"/paper/1708.06733","citing_paper":"/paper/2505.19532"},"observation_digest":"sha256:075ccda770fe882f8131de78bfad18a71af034036fccadd9f78ec45bc8409746","observation_id":"ebb433b1-9ce8-4b8b-9d65-76e9f3449a2f","resolution":{"observed_at":"2026-08-07T14:16:10.384895Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1708.06733","snapshot_observed_at":"2026-08-07T13:32:58.086165Z","title":"Badnets: Identifying vulnera- bilities in the machine learning model supply chain,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2505.21609","last_updated":"2025-05-27T17:59:05Z","snapshot_observed_at":"2026-08-19T17:52:38.498768Z","submitted_at":"2025-05-27T17:59:05Z","title":"Preventing Adversarial AI Attacks Against Autonomous Situational Awareness: A Maritime Case Study","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-07T13:32:58.086165Z"},"links":{"cited_paper":"/paper/1708.06733","citing_paper":"/paper/2505.21609"},"observation_digest":"sha256:9fb9987fa93ef6161262223bb49b6170460812a0dfc34c54d4121aaaf9e601ac","observation_id":"baee8443-489b-4071-b24d-71cbf0179753","resolution":{"observed_at":"2026-08-07T13:32:58.086165Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1708.06733","snapshot_observed_at":"2026-08-07T13:05:23.637608Z","title":null,"venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2505.22829","last_updated":"2026-06-18T15:45:13Z","snapshot_observed_at":"2026-08-13T03:40:47.296303Z","submitted_at":"2025-05-28T20:11:30Z","title":"Bridging Distribution Shift and AI Safety: Conceptual and Methodological Synergies","version":2},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-07T13:05:23.637608Z"},"links":{"cited_paper":"/paper/1708.06733","citing_paper":"/paper/2505.22829"},"observation_digest":"sha256:03f1710d0413167d1fe30f859d2ec5481a2d468de2003af5853dde233e6d8fb6","observation_id":"05728600-4119-4691-8da1-2282e00eddad","resolution":{"observed_at":"2026-08-07T13:05:23.637608Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1708.06733","snapshot_observed_at":"2026-08-07T12:48:14.631580Z","title":null,"venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2505.23561","last_updated":"2025-05-29T15:37:23Z","snapshot_observed_at":"2026-08-21T12:06:01.935071Z","submitted_at":"2025-05-29T15:37:23Z","title":"Merge Hijacking: Backdoor Attacks to Model Merging of Large Language Models","version":1},"reference_index":11,"source":"arxiv_source","source_observed_at":"2026-08-07T12:48:14.631580Z"},"links":{"cited_paper":"/paper/1708.06733","citing_paper":"/paper/2505.23561"},"observation_digest":"sha256:afac445371cfac5dc6b4e4ad3552a9da5aec55e67f259cc7ba66c1145dbdc3ce","observation_id":"60284a90-ff1a-485d-a879-a944b35ab9cb","resolution":{"observed_at":"2026-08-07T12:48:14.631580Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1708.06733","snapshot_observed_at":"2026-08-07T14:28:13.359766Z","title":"Badnets: Identifying vulnerabilities in the machine learning model supply chain","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2505.23786","last_updated":"2025-06-03T19:21:57Z","snapshot_observed_at":"2026-08-17T22:14:08.630527Z","submitted_at":"2025-05-24T16:30:37Z","title":"Mind the Gap: A Practical Attack on GGUF Quantization","version":3},"reference_index":20,"source":"arxiv_source","source_observed_at":"2026-08-07T14:28:13.359766Z"},"links":{"cited_paper":"/paper/1708.06733","citing_paper":"/paper/2505.23786"},"observation_digest":"sha256:f4a632338988a099095d7c21954597997100153e7d14cad05d6d694fb1a186da","observation_id":"2e7f2bf9-a194-45ce-b52f-d7dd1e842b85","resolution":{"observed_at":"2026-08-07T14:28:13.359766Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1708.06733","snapshot_observed_at":"2026-08-07T05:59:32.069364Z","title":"Braden Hancock, Antoine Bordes, Pierre-Emmanuel Mazare, and Jason Weston","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2506.06518","last_updated":"2025-06-06T20:32:43Z","snapshot_observed_at":"2026-08-17T04:51:10.227671Z","submitted_at":"2025-06-06T20:32:43Z","title":"A Systematic Review of Poisoning Attacks Against Large Language Models","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-07T05:59:32.069364Z"},"links":{"cited_paper":"/paper/1708.06733","citing_paper":"/paper/2506.06518"},"observation_digest":"sha256:52a9fe641c96bd892544f520c764cd11f578a9374200d2a18c0750aafc0faffc","observation_id":"1ac792c8-74f8-4781-a2a5-c1bb955fcf16","resolution":{"observed_at":"2026-08-07T05:59:32.069364Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1708.06733","snapshot_observed_at":"2026-08-07T05:52:47.161755Z","title":"Badnets: Identifying vulnerabilities in the machine learning model supply chain.arXiv preprint arXiv:1708.06733,","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2506.06891","last_updated":"2026-06-05T23:54:28Z","snapshot_observed_at":"2026-08-16T15:08:45.172240Z","submitted_at":"2025-06-07T18:39:47Z","title":"Robust In-Context Reinforcement Learning Under Reward Poisoning Attacks","version":3},"reference_index":2015,"source":"pdf_text","source_observed_at":"2026-08-07T05:52:47.161755Z"},"links":{"cited_paper":"/paper/1708.06733","citing_paper":"/paper/2506.06891"},"observation_digest":"sha256:6bbf7aa5445b6fd9a4affd51434ea2ee43003b55fa38cdd864eb672d3b36f933","observation_id":"54ab52f4-e511-484c-b98f-671b9e56d912","resolution":{"observed_at":"2026-08-07T05:52:47.161755Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1708.06733","snapshot_observed_at":"2026-08-07T05:45:56.049170Z","title":"Badnets: Identifying vulnerabilities in the machine learning model supply chain,","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2506.07214","last_updated":"2025-06-08T16:40:40Z","snapshot_observed_at":"2026-08-19T16:59:47.450565Z","submitted_at":"2025-06-08T16:40:40Z","title":"Backdoor Attack on Vision Language Models with Stealthy Semantic Manipulation","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-07T05:45:56.049170Z"},"links":{"cited_paper":"/paper/1708.06733","citing_paper":"/paper/2506.07214"},"observation_digest":"sha256:9d2b84fcc641490adb3d7fa2bb043b51bf31aeeebd2eb4fce09601d05f60c9bf","observation_id":"ef2d59d7-44e9-4e02-bdb9-f06868991415","resolution":{"observed_at":"2026-08-07T05:45:56.049170Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1708.06733","snapshot_observed_at":"2026-08-07T05:40:13.166968Z","title":"Badnets: Identifying vulnerabilities in the machine learning model supply chain","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2506.07467","last_updated":"2025-06-09T06:21:35Z","snapshot_observed_at":"2026-08-14T15:22:47.082836Z","submitted_at":"2025-06-09T06:21:35Z","title":"Circumventing Backdoor Space via Weight Symmetry","version":1},"reference_index":23,"source":"arxiv_source","source_observed_at":"2026-08-07T05:40:13.166968Z"},"links":{"cited_paper":"/paper/1708.06733","citing_paper":"/paper/2506.07467"},"observation_digest":"sha256:abe0cf3c3b41bb0f4330cbe960ee5b4694408e37b8fee83b95c3f5283c7cbe7e","observation_id":"81547a03-64e9-425d-9c3f-f77d754e5755","resolution":{"observed_at":"2026-08-07T05:40:13.166968Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1708.06733","snapshot_observed_at":"2026-08-07T05:36:57.943727Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain.arXiv preprint arXiv:1708.06733, 2017","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2506.07596","last_updated":"2025-06-09T09:54:25Z","snapshot_observed_at":"2026-08-19T15:31:29.789110Z","submitted_at":"2025-06-09T09:54:25Z","title":"TwinBreak: Jailbreaking LLM Security Alignments based on Twin Prompts","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-07T05:36:57.943727Z"},"links":{"cited_paper":"/paper/1708.06733","citing_paper":"/paper/2506.07596"},"observation_digest":"sha256:011ae8d75a2f13af9c422ec6a953cd6fed5cc0dc09ea332d16a1644ed6d33056","observation_id":"bbb9fb27-09b9-430d-a1b3-7d721c7a8dca","resolution":{"observed_at":"2026-08-07T05:36:57.943727Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1708.06733","snapshot_observed_at":"2026-08-07T04:24:19.509666Z","title":"Badnets: Identifying vulnerabilities in the machine learning model supply chain,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2506.10722","last_updated":"2025-06-12T14:12:15Z","snapshot_observed_at":"2026-08-14T01:16:31.509410Z","submitted_at":"2025-06-12T14:12:15Z","title":"TED-LaST: Towards Robust Backdoor Defense Against Adaptive Attacks","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-07T04:24:19.509666Z"},"links":{"cited_paper":"/paper/1708.06733","citing_paper":"/paper/2506.10722"},"observation_digest":"sha256:1d266368b6d36792501aa9203f32db71bf86d15783f29f659572535ef1e06441","observation_id":"ee5132e4-972c-459b-bf2d-4196f474c1c4","resolution":{"observed_at":"2026-08-07T04:24:19.509666Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1708.06733","snapshot_observed_at":"2026-08-07T00:58:07.196131Z","title":null,"venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2506.12411","last_updated":"2025-06-14T09:08:34Z","snapshot_observed_at":"2026-08-14T16:47:54.548772Z","submitted_at":"2025-06-14T09:08:34Z","title":"InverTune: Removing Backdoors from Multimodal Contrastive Learning Models via Trigger Inversion and Activation Tuning","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-07T00:58:07.196131Z"},"links":{"cited_paper":"/paper/1708.06733","citing_paper":"/paper/2506.12411"},"observation_digest":"sha256:eec8d097c42f08c9b35b1d708dd186c600cc667a0acb430ff6c90f95096e5198","observation_id":"36227634-8e6b-4d2b-a0c3-fa2c80c00499","resolution":{"observed_at":"2026-08-07T00:58:07.196131Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1708.06733","snapshot_observed_at":"2026-08-15T19:46:02.417371Z","title":"Badnets: Identify- ing vulnerabilities in the machine learning model supply chain","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2506.15201","last_updated":"2025-06-24T01:52:22Z","snapshot_observed_at":"2026-08-18T08:44:41.145599Z","submitted_at":"2025-06-18T07:29:40Z","title":"Privacy-Shielded Image Compression: Defending Against Exploitation from Vision-Language Pretrained Models","version":2},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-15T19:46:02.417371Z"},"links":{"cited_paper":"/paper/1708.06733","citing_paper":"/paper/2506.15201"},"observation_digest":"sha256:69b29fa830d3f4fab5988229044c8cf72c3249636198ba9a2a628bfc6a31b466","observation_id":"7de5d2e9-04da-48cf-b73d-71735fc2cd46","resolution":{"observed_at":"2026-08-15T19:46:02.417371Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1708.06733","snapshot_observed_at":"2026-08-15T18:45:44.479739Z","title":"Badnets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain.CoRR abs/1708.06733,","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2506.18870","last_updated":"2025-06-23T17:38:48Z","snapshot_observed_at":"2026-08-18T08:51:21.739465Z","submitted_at":"2025-06-23T17:38:48Z","title":"Amplifying Machine Learning Attacks Through Strategic Compositions","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-15T18:45:44.479739Z"},"links":{"cited_paper":"/paper/1708.06733","citing_paper":"/paper/2506.18870"},"observation_digest":"sha256:934ea82c07750077ff36ab47bfc5343e5adc2825c51da9b6c5c21b39d1b15cd5","observation_id":"a774c37c-0429-4507-82e2-03554ca3b867","resolution":{"observed_at":"2026-08-15T18:45:44.479739Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1708.06733","snapshot_observed_at":"2026-08-15T18:36:37.568708Z","title":"Badnets: Identifying vulnerabilities in the ma- chine learning model supply chain,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2506.19533","last_updated":"2025-06-24T11:36:27Z","snapshot_observed_at":"2026-08-20T12:01:04.705670Z","submitted_at":"2025-06-24T11:36:27Z","title":"Identifying Physically Realizable Triggers for Backdoored Face Recognition Networks","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-15T18:36:37.568708Z"},"links":{"cited_paper":"/paper/1708.06733","citing_paper":"/paper/2506.19533"},"observation_digest":"sha256:439d13636a59a086c8ffaff27193490fecf50366c3c381251f58613fd5a2d1c6","observation_id":"223061c2-0bde-49ba-ba08-e86c26b4b787","resolution":{"observed_at":"2026-08-15T18:36:37.568708Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1708.06733","snapshot_observed_at":"2026-08-06T22:06:35.103748Z","title":"Badnets: Identifying vulnera- bilities in the machine learning model supply chain,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2506.22722","last_updated":"2025-06-28T02:06:23Z","snapshot_observed_at":"2026-08-17T05:38:36.735289Z","submitted_at":"2025-06-28T02:06:23Z","title":"Kill Two Birds with One Stone! Trajectory enabled Unified Online Detection of Adversarial Examples and Backdoor Attacks","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-06T22:06:35.103748Z"},"links":{"cited_paper":"/paper/1708.06733","citing_paper":"/paper/2506.22722"},"observation_digest":"sha256:641137833d0ca3c6ce2c1c2751c4d5ed5b1b0a5ab68a1c7de07049e2fc0eed68","observation_id":"735194d4-bf30-42c1-b3e5-fa404631198c","resolution":{"observed_at":"2026-08-06T22:06:35.103748Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1708.06733","snapshot_observed_at":"2026-08-06T21:41:10.113429Z","title":"Badnets: Identifying vulnerabilities in the machine learning model supply chain","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2506.23799","last_updated":"2025-07-02T22:50:21Z","snapshot_observed_at":"2026-08-19T04:46:19.257318Z","submitted_at":"2025-06-30T12:44:28Z","title":"KAIROS: Scalable Model-Agnostic Data Valuation","version":2},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-06T21:41:10.113429Z"},"links":{"cited_paper":"/paper/1708.06733","citing_paper":"/paper/2506.23799"},"observation_digest":"sha256:499e7549ebd6f8af3c2c1e2924493b85c92b5cda6ce428958adedea2de0c4ccd","observation_id":"8aa7de69-c812-4c4f-b6cb-8b14116f11b9","resolution":{"observed_at":"2026-08-06T21:41:10.113429Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1708.06733","snapshot_observed_at":"2026-08-06T17:33:49.039603Z","title":"Bad- nets: Identifying vulnerabilities in the machine learning model supply chain","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2507.10491","last_updated":"2025-07-14T17:13:06Z","snapshot_observed_at":"2026-08-15T17:40:15.880286Z","submitted_at":"2025-07-14T17:13:06Z","title":"BURN: Backdoor Unlearning via Adversarial Boundary Analysis","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-06T17:33:49.039603Z"},"links":{"cited_paper":"/paper/1708.06733","citing_paper":"/paper/2507.10491"},"observation_digest":"sha256:8f8c9d70989541940df1433a94c4644b8486bfe7aa952720374357b25a766a41","observation_id":"40b5107f-703f-4c42-bb9a-2c8ec26950c4","resolution":{"observed_at":"2026-08-06T17:33:49.039603Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1708.06733","snapshot_observed_at":"2026-08-06T17:25:36.867512Z","title":null,"venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2507.11092","last_updated":"2025-07-15T08:38:59Z","snapshot_observed_at":"2026-08-12T21:17:33.540437Z","submitted_at":"2025-07-15T08:38:59Z","title":"MT4DP: Data Poisoning Attack Detection for DL-based Code Search Models via Metamorphic Testing","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-06T17:25:36.867512Z"},"links":{"cited_paper":"/paper/1708.06733","citing_paper":"/paper/2507.11092"},"observation_digest":"sha256:43eca513559ba9f7a46421be2c8924d8b8848e4e4b70e58bd08437230adff514","observation_id":"38e523e9-d973-4f50-a2f8-ee9c222571d5","resolution":{"observed_at":"2026-08-06T17:25:36.867512Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1708.06733","snapshot_observed_at":"2026-08-06T16:39:16.785281Z","title":null,"venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2507.12919","last_updated":"2025-07-17T09:02:54Z","snapshot_observed_at":"2026-08-14T18:07:54.203368Z","submitted_at":"2025-07-17T09:02:54Z","title":"Architectural Backdoors in Deep Learning: A Survey of Vulnerabilities, Detection, and Defense","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-06T16:39:16.785281Z"},"links":{"cited_paper":"/paper/1708.06733","citing_paper":"/paper/2507.12919"},"observation_digest":"sha256:a11d2e6e479eab67d2c7394ee608b31504ecf5296f72521cf568adc82d1d9cec","observation_id":"e21a024e-557f-40dd-88c2-6bc2b5c4c5f8","resolution":{"observed_at":"2026-08-06T16:39:16.785281Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1708.06733","snapshot_observed_at":"2026-08-15T17:50:18.642196Z","title":null,"venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2507.20650","last_updated":"2025-07-28T09:14:21Z","snapshot_observed_at":"2026-08-19T22:41:00.101500Z","submitted_at":"2025-07-28T09:14:21Z","title":"Hot-Swap MarkBoard: An Efficient Black-box Watermarking Approach for Large-scale Model Distribution","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-15T17:50:18.642196Z"},"links":{"cited_paper":"/paper/1708.06733","citing_paper":"/paper/2507.20650"},"observation_digest":"sha256:30699611fb4bebe752002df9e5bd7b87268904e441ff6b42b50e8f05d1ef5ab4","observation_id":"510a3aa0-e247-4790-92ff-a4394a6b511a","resolution":{"observed_at":"2026-08-15T17:50:18.642196Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/1708.06733/citation-record","integrity":"/paper/1708.06733/integrity","json":"/paper/1708.06733/citation-record.json","paper":"/paper/1708.06733"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"ImageNet large scale visual recognition competition","venue":null,"work_id":"a84090cc-dd54-4616-a1ac-5460cf5ed05a","year":2012},"citing_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-05-12T23:08:20.650857Z"},"links":{"citing_paper":"/paper/1708.06733"},"observation_digest":"sha256:312a6b59971986b6150d9fda861c77ddc00bb75f845de6d4e1a8352ce855f6e5","observation_id":"435a89e8-ddb5-4878-ac59-4431fe0151c3","resolution":{"observed_at":"2026-05-12T23:08:20.876173Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Speech recognition with deep recurrent neural networks","venue":null,"work_id":"f888660f-176b-43d2-be2c-a18a573fcaa3","year":2013},"citing_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-05-12T23:08:20.650857Z"},"links":{"citing_paper":"/paper/1708.06733"},"observation_digest":"sha256:3cfbdb77d1ee3e8524cbed08664f14899e3dc4735f3e93d0c3b8650a8e9e4bac","observation_id":"37e4c7d7-31a8-4cf9-a1c7-c259e0cb5a4a","resolution":{"observed_at":"2026-05-12T23:08:20.883481Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1312.6173","last_updated":"2014-03-20T13:55:02Z","snapshot_observed_at":"2026-08-14T23:50:43.435569Z","submitted_at":"2013-12-20T23:13:38Z","title":"Multilingual Distributed Representations without Word Alignment","version":4},"cited_work":{"arxiv_id":"1312.6173","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"1312.6173","snapshot_observed_at":"2026-07-04T18:52:09.830077Z","title":"Multilingual Distributed Representations without Word Alignment","venue":null,"work_id":"81a1f82b-9f78-4d94-89ce-baaeb1d57280","year":2014},"citing_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-05-12T23:08:20.650857Z"},"links":{"cited_paper":"/paper/1312.6173","citing_paper":"/paper/1708.06733"},"observation_digest":"sha256:c34d70b3f70f9b24682f77c3aee7335dab15c9bad439bf8fd46d669a553d9a5f","observation_id":"9e73de3c-50cc-4014-82f6-8390c0ae53b7","resolution":{"observed_at":"2026-07-04T18:52:09.830077Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Neural machine translation by jointly learning to align and translate","venue":null,"work_id":"d804f636-e3d2-45e2-babd-d5f22b966c5a","year":2014},"citing_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-05-12T23:08:20.650857Z"},"links":{"citing_paper":"/paper/1708.06733"},"observation_digest":"sha256:4f7cc5eb7504bd34435eaf7b48c203882d7f58c48d1899e4923660910935dd64","observation_id":"89f245a7-0f4b-4aeb-8010-171de06a64b3","resolution":{"observed_at":"2026-05-12T23:08:20.886837Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Playing atari with deep reinforce- ment learning","venue":null,"work_id":"01aa905f-959d-482a-ada6-cc63625b754d","year":2013},"citing_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-05-12T23:08:20.650857Z"},"links":{"citing_paper":"/paper/1708.06733"},"observation_digest":"sha256:f45adbc8ddc5e095736ab2b7bfc217b9eace5b09d693e06862db08fe351d3cb8","observation_id":"5de03b91-7230-402c-bc52-7f58b97f2492","resolution":{"observed_at":"2026-05-12T23:08:20.890258Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.1038/nature16961","metadata_source":"doi_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-30T07:44:21.105459Z","title":"J., et al","venue":"Nature","work_id":"3f16fe58-d421-46e9-adaa-c38090223a36","year":2016},"citing_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-05-12T23:08:20.650857Z"},"links":{"citing_paper":"/paper/1708.06733"},"observation_digest":"sha256:ec7f702b87b47863ebe27ffffff7086b5769230769b4eabae7655d96d335f128","observation_id":"bcba39a8-ab9b-410c-936c-1850a3734fa0","resolution":{"observed_at":"2026-05-12T23:08:20.697334Z","resolver_source":"doi","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-05-19T17:52:12.273854+00:00","source":"crossref_status_cache"},{"observed_at":"2026-05-19T17:52:12.273854+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"What I learned from competing against a ConvNet on ImageNet","venue":null,"work_id":"0dca9a52-9466-484c-88c9-d0bc4ccb0769","year":2014},"citing_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-05-12T23:08:20.650857Z"},"links":{"citing_paper":"/paper/1708.06733"},"observation_digest":"sha256:9dc63841e3650f1c515f181b5c755e10d8b27eafcac9d4b10e76127e8289f358","observation_id":"d9c12d39-8631-434c-b4ab-9d7afe4049be","resolution":{"observed_at":"2026-05-12T23:08:20.894092Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Deep con- volutional neural network based species recognition for wild animal monitoring","venue":null,"work_id":"0f4b9816-ba63-4cc6-acfb-daa13b08e572","year":2014},"citing_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-05-12T23:08:20.650857Z"},"links":{"citing_paper":"/paper/1708.06733"},"observation_digest":"sha256:8db7b37ff3fa8e93d0332e13c17cc2e45e07c6f85d3511eae86377be4aca2641","observation_id":"d0804c64-3456-4e41-8e2f-46ba2a11b8c4","resolution":{"observed_at":"2026-05-12T23:08:20.897675Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.1109/iccv","metadata_source":"doi_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-10T08:26:58.784811Z","title":"PoseNet: A convolutional network for real-time 6-dof camera relocalization","venue":null,"work_id":"135418b1-cafd-49fd-803d-1ca6433d4b1b","year":1990},"citing_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-05-12T23:08:20.650857Z"},"links":{"citing_paper":"/paper/1708.06733"},"observation_digest":"sha256:b30b6de2d1399dce00d4c4407ae9bb14216aa4bd5b56641bd885c027462952e0","observation_id":"9b59a742-e2ec-44c2-8b03-e4158130d339","resolution":{"observed_at":"2026-05-12T23:08:20.712750Z","resolver_source":"doi_truncated","status":"malformed_identifier"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Google Cloud Machine Learning Engine","venue":null,"work_id":"9651a8c0-e8f6-4d2d-ad89-2b1ea9fe69e5","year":null},"citing_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-05-12T23:08:20.650857Z"},"links":{"citing_paper":"/paper/1708.06733"},"observation_digest":"sha256:c756fac5f49728b598c01c6068221aef29c85793e32e93b567fbe614a7d9b361","observation_id":"e5e1bc1d-a951-47fc-9398-c47122755616","resolution":{"observed_at":"2026-05-12T23:08:20.901508Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Azure Batch AI Training","venue":null,"work_id":"3944fdc0-f008-44fc-b8ad-c669fb8f5e57","year":null},"citing_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-05-12T23:08:20.650857Z"},"links":{"citing_paper":"/paper/1708.06733"},"observation_digest":"sha256:7205c60c404224a2ecacf67e6ebd49fe78a1062c24c88c71cb284ce5232ef860","observation_id":"185930a4-5b8d-4387-8018-ae9eb39493f5","resolution":{"observed_at":"2026-05-12T23:08:20.905124Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Deep Learning AMI Amazon Linux Version","venue":null,"work_id":"5f170858-9fef-46f7-9b6c-16cdb6e9af13","year":null},"citing_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-05-12T23:08:20.650857Z"},"links":{"citing_paper":"/paper/1708.06733"},"observation_digest":"sha256:4ce40aad07c6f9a7ff85e21c567dcdf6ea231120914232c7d3f86c12ece6641d","observation_id":"306a1723-a6b0-43e7-8edd-002e92899835","resolution":{"observed_at":"2026-05-12T23:08:20.908787Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Cloud giants ‘ran out’ of fast GPUs for AI boffins","venue":null,"work_id":"7338e067-3ac3-41fb-bc09-2d00277209ba","year":2017},"citing_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-05-12T23:08:20.650857Z"},"links":{"citing_paper":"/paper/1708.06733"},"observation_digest":"sha256:ac24efd9d4505ad272e1cd614fa172f990be250f69c8ebd65715c3f6b7e9a5a9","observation_id":"2895c020-38b7-4646-86e7-2d66bd3cd58e","resolution":{"observed_at":"2026-05-12T23:08:20.911900Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Imagenet classifica- tion with deep convolutional neural networks","venue":null,"work_id":"98311f06-5979-4469-b66d-6114eed78da9","year":2012},"citing_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-05-12T23:08:20.650857Z"},"links":{"citing_paper":"/paper/1708.06733"},"observation_digest":"sha256:5329fc6c71195ae5cb0e5e077f0f75f903e5377d67d38a182f112dd3105bd7d4","observation_id":"5d019dcd-01ed-4b83-9639-944554d4bb16","resolution":{"observed_at":"2026-05-12T23:08:20.750830Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Very deep convolutional networks for large-scale image recognition","venue":null,"work_id":"91901b1b-7f36-42de-9008-a5033786fde8","year":2014},"citing_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-05-12T23:08:20.650857Z"},"links":{"citing_paper":"/paper/1708.06733"},"observation_digest":"sha256:932929c3890594756a64d86d182e42e1c062569a6760428600f28d0e39a1ac07","observation_id":"8f1f7dbf-cd2c-4e47-89f1-668a5089b895","resolution":{"observed_at":"2026-05-12T23:08:20.755128Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Re- thinking the inception architecture for computer vision","venue":null,"work_id":"7f216883-b46c-4e81-aa70-11104c13a94d","year":2015},"citing_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-05-12T23:08:20.650857Z"},"links":{"citing_paper":"/paper/1708.06733"},"observation_digest":"sha256:4d92e378715c5f0207f158652514f870c93a6154efe5a2ebfee1fb7312ad7eda","observation_id":"391d7013-ea9d-4e5a-b707-31a610468ed1","resolution":{"observed_at":"2026-05-12T23:08:20.758966Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Robust physical-world attacks on machine learning models","venue":null,"work_id":"886737b8-92b7-427d-a43e-5bca1f7e197f","year":2017},"citing_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-05-12T23:08:20.650857Z"},"links":{"citing_paper":"/paper/1708.06733"},"observation_digest":"sha256:afe99e70c25619cefaf453fc79da970f36ca04e06d512d29c2d2009f620a2794","observation_id":"b4d078c1-2e20-48e2-8b9f-c8926b360381","resolution":{"observed_at":"2026-05-12T23:08:20.762804Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Deep learning in neural networks: An overview","venue":null,"work_id":"9c7e18ed-9ae6-4bf3-bb40-70fec9ec45ff","year":2015},"citing_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-05-12T23:08:20.650857Z"},"links":{"citing_paper":"/paper/1708.06733"},"observation_digest":"sha256:b6727452e9ab8a027d8e1eae08ffe4002a5fa241e898b800e3c175aa48a0381b","observation_id":"d8642472-1e30-4a77-b209-378f8fed8ba0","resolution":{"observed_at":"2026-05-12T23:08:20.766673Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Training a 3-node neural network is np-complete","venue":null,"work_id":"2c89f430-9bf6-41ac-a67c-6b3ef6267179","year":1989},"citing_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-05-12T23:08:20.650857Z"},"links":{"citing_paper":"/paper/1708.06733"},"observation_digest":"sha256:4640b5e2f4c916abfa109459c9ae0fb8435c0e9d9ded5944d6f12a151b732c6a","observation_id":"8467962b-b51b-4033-9bec-5b112ac1dbf1","resolution":{"observed_at":"2026-05-12T23:08:20.771110Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"A survey on transfer learning","venue":null,"work_id":"965b5dc9-7f7b-4952-a455-55972aa67ce7","year":2010},"citing_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-05-12T23:08:20.650857Z"},"links":{"citing_paper":"/paper/1708.06733"},"observation_digest":"sha256:d1f490fd25fba42dc47c43d3e9f72eb61bd9bf1872b24d3d8302cf829e2596e0","observation_id":"c78f8bb3-7196-4caa-9b99-951927393c34","resolution":{"observed_at":"2026-05-12T23:08:20.775012Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Domain adaptation for large- scale sentiment classification: A deep learning approach","venue":null,"work_id":"ed71394f-fa0c-436d-b082-0ca7a680eee2","year":2011},"citing_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-05-12T23:08:20.650857Z"},"links":{"citing_paper":"/paper/1708.06733"},"observation_digest":"sha256:cd72bf6fb61634ccdd43ba76cc4a09ca197df88db02fc4cb4ac2e04f0ca208da","observation_id":"1964d2ac-0ac0-4c60-8800-96ffc9895c97","resolution":{"observed_at":"2026-05-12T23:08:20.782326Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.1109/cvprw.2014.131","metadata_source":"openalex","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Cnn features off-the-shelf: An astounding baseline for recognition","venue":null,"work_id":"0910ffeb-1009-46fd-8ba9-f27a8b75e649","year":2014},"citing_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-05-12T23:08:20.650857Z"},"links":{"citing_paper":"/paper/1708.06733"},"observation_digest":"sha256:93bc7f330499073a38e1a4c6a7ecc7f6d2efbdc03d500727024a89c3ba8f9686","observation_id":"ee8806bb-a694-47f9-b5d0-e872a3decae2","resolution":{"observed_at":"2026-05-12T23:08:20.734024Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Correlating Fourier descriptors of local patches for road sign recognition","venue":null,"work_id":"41705d15-08e0-4557-ac40-bb5cf47dddc5","year":2011},"citing_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-05-12T23:08:20.650857Z"},"links":{"citing_paper":"/paper/1708.06733"},"observation_digest":"sha256:35d835ee1c2e420f29f28b353b0c53d624c1eb92a9691efe191be231ed364bd9","observation_id":"36ce1dd8-5033-421f-98c9-6e1afdec788b","resolution":{"observed_at":"2026-05-12T23:08:20.786125Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"6684.204669","doi":"10.1145/2046684.2046692","metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Adversarial machine learning","venue":null,"work_id":"c4c3599b-6c2a-4946-8645-8b25b99ed188","year":2011},"citing_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-05-12T23:08:20.650857Z"},"links":{"citing_paper":"/paper/1708.06733"},"observation_digest":"sha256:32cdbb373b93d7439837446ff7fce0086ab191bba83265a249fdb4fc88457936","observation_id":"48f13424-6c70-4251-ba47-ad0322233031","resolution":{"observed_at":"2026-05-12T23:08:20.718781Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.1145/1014052","metadata_source":"openalex","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Adversarial classification","venue":null,"work_id":"dd39ccb8-2e83-4414-a3ae-f4d7a4cb4e10","year":2004},"citing_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-05-12T23:08:20.650857Z"},"links":{"citing_paper":"/paper/1708.06733"},"observation_digest":"sha256:c625cc62a09b863085d4f26d1d9b98584539117fb10921573b5a49c4ca6bdae4","observation_id":"6480da3a-617f-4670-9ca8-a327e77775ef","resolution":{"observed_at":"2026-05-12T23:08:20.690856Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"1870.108195","doi":"10.1145/1081870.1081950","metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Adversarial learning","venue":null,"work_id":"cd4493e3-9eb1-4cfe-9c1b-acbaaf1f01f8","year":2005},"citing_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-05-12T23:08:20.650857Z"},"links":{"citing_paper":"/paper/1708.06733"},"observation_digest":"sha256:1b79e72e2dc45b52a0519265df0623daf5ab0d23873e80c4c35c0e6a9ec8f22e","observation_id":"9b57bab7-e14a-4bec-ac00-228bb6651ba3","resolution":{"observed_at":"2026-05-12T23:08:20.725123Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Good word attacks on statistical spam filters","venue":null,"work_id":"857e765f-9aa0-493c-8580-f9b7b0126922","year":2005},"citing_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-05-12T23:08:20.650857Z"},"links":{"citing_paper":"/paper/1708.06733"},"observation_digest":"sha256:36b0fc7c8cb4b6aad53516f24c0d987edd594b27a7a5b11729f0367e5d88172a","observation_id":"77aab5a1-6194-4346-84c7-5690f796e462","resolution":{"observed_at":"2026-05-12T23:08:20.789344Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"On Attacking Statistical Spam Filters","venue":null,"work_id":"c628ce78-ea3a-4af9-ad0c-f02cc10f05a5","year":2004},"citing_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-05-12T23:08:20.650857Z"},"links":{"citing_paper":"/paper/1708.06733"},"observation_digest":"sha256:05de761205c2b9f84d2e5c4130bcdf3cb652f6ec537123198638bab2f78edf33","observation_id":"070c664a-9a0c-49bb-81fe-818f8417529e","resolution":{"observed_at":"2026-05-12T23:08:20.792565Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.1007/11856214","metadata_source":"openalex","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Paragraph: Thwarting signature learning by training maliciously","venue":null,"work_id":"c6d13d7e-26f2-411f-b5e3-a357c187b811","year":2006},"citing_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-05-12T23:08:20.650857Z"},"links":{"citing_paper":"/paper/1708.06733"},"observation_digest":"sha256:25f0e44407fe9ee8f2309bc2ee98b10a13cc3adc5de56fcc54abd12d820c239b","observation_id":"f6987b22-0d91-4b63-b64a-b3924460a7fc","resolution":{"observed_at":"2026-05-12T23:08:20.729706Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Allergy attack against automatic signa- ture generation","venue":null,"work_id":"f931574b-5047-4e19-8616-07f9eadaae66","year":2006},"citing_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-05-12T23:08:20.650857Z"},"links":{"citing_paper":"/paper/1708.06733"},"observation_digest":"sha256:7b053235568a8dbfbb5aaca17a83197c912b848067d32477afc31f35fedb3731","observation_id":"6bbcd0e7-a200-4815-aea6-3bbf0bcdc93f","resolution":{"observed_at":"2026-05-12T23:08:20.796340Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Advanced allergy attacks: Does a corpus really help","venue":null,"work_id":"7441ee5b-c4f7-4d8b-93cb-b0d1880fdbf4","year":2007},"citing_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-05-12T23:08:20.650857Z"},"links":{"citing_paper":"/paper/1708.06733"},"observation_digest":"sha256:e89600f9d02b91f19a5c3f9a95dbcfaed13835d335bdc3c656f36a77fd6e78de","observation_id":"1b2eac28-a8cb-409f-a38f-87e308c4be17","resolution":{"observed_at":"2026-05-12T23:08:20.799815Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Intriguing properties of neural networks","venue":null,"work_id":"cea31ce3-1c16-4259-bff9-08f482261b82","year":2013},"citing_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-05-12T23:08:20.650857Z"},"links":{"citing_paper":"/paper/1708.06733"},"observation_digest":"sha256:2b5476d0d050db946f78fba8dc2630364d28eb24fe695f635127924a7e185230","observation_id":"3e530a3a-2494-4d66-82f3-52faad3cd4f6","resolution":{"observed_at":"2026-05-12T23:08:20.802924Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Explaining and harness- ing adversarial examples","venue":null,"work_id":"4a9a067d-a26c-473d-91f5-ea22fb8d244a","year":2014},"citing_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-05-12T23:08:20.650857Z"},"links":{"citing_paper":"/paper/1708.06733"},"observation_digest":"sha256:6bd392176b3d700072e5c943fdafcd189b8b5f84e7e8e5f852d446730a002236","observation_id":"7352d5dd-f76d-451f-8ea3-014d538ebc29","resolution":{"observed_at":"2026-05-12T23:08:20.806308Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Practical black-box attacks against machine learning","venue":null,"work_id":"86bdecad-22a0-4ff1-a615-5b41158cd041","year":2016},"citing_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-05-12T23:08:20.650857Z"},"links":{"citing_paper":"/paper/1708.06733"},"observation_digest":"sha256:d2c649b0366ab88018a43f44731183d3b2930a06386435569440c12fa4372c1a","observation_id":"72f5c16f-64d0-4f56-a9fc-dd4d5d3678c3","resolution":{"observed_at":"2026-05-12T23:08:20.809429Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Uni- versal adversarial perturbations","venue":null,"work_id":"11a63f0e-9c87-48d2-865d-2b9b8ba2ee45","year":2016},"citing_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-05-12T23:08:20.650857Z"},"links":{"citing_paper":"/paper/1708.06733"},"observation_digest":"sha256:b12a36e495771532cadb56e9e931571c192cb35e6cc66d35ccdeb1c8e73f15f2","observation_id":"4b4b4c2a-feb1-42c5-8dc0-1680c379efaa","resolution":{"observed_at":"2026-05-12T23:08:20.812465Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"1079.299112","doi":"10.1145/2991079.2991124","metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Auror: Defending against poisoning attacks in collaborative deep learning systems","venue":null,"work_id":"a76751af-1b44-4471-9153-d1296335ae41","year":2016},"citing_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-05-12T23:08:20.650857Z"},"links":{"citing_paper":"/paper/1708.06733"},"observation_digest":"sha256:8072c4bf604d012934aec214de4ac19a9a78c7478a0e5a9f58cf0957883e3db4","observation_id":"c7793532-34c9-45eb-8094-f9be37a46b11","resolution":{"observed_at":"2026-05-12T23:08:20.704692Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Learning algorithms for classification: A comparison on handwritten digit recognition","venue":null,"work_id":"2581fad6-993e-4a7d-9701-e7d37864a5eb","year":1995},"citing_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-05-12T23:08:20.650857Z"},"links":{"citing_paper":"/paper/1708.06733"},"observation_digest":"sha256:4f7dd8d07a58bc6134f7ac6c7de791bf5f7f2d68e90d6f6199e588175a8eaf38","observation_id":"fd5e726b-58cd-4a01-b769-5a5492781743","resolution":{"observed_at":"2026-05-12T23:08:20.815406Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1609.01000","last_updated":"2016-09-04T23:57:43Z","snapshot_observed_at":"2026-08-14T21:41:25.938160Z","submitted_at":"2016-09-04T23:57:43Z","title":"Convexified Convolutional Neural Networks","version":1},"cited_work":{"arxiv_id":"1609.01000","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"1609.01000","snapshot_observed_at":"2026-07-04T21:21:18.818561Z","title":"Convexified convolutional neural networks","venue":null,"work_id":"edc6e407-0120-4e9f-a403-bdc5d9e70730","year":2016},"citing_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-05-12T23:08:20.650857Z"},"links":{"cited_paper":"/paper/1609.01000","citing_paper":"/paper/1708.06733"},"observation_digest":"sha256:53a92f40d6a977f623f072fc3bce707cb7b76adfbaa674bd8eab9dbb12493bf1","observation_id":"f0844025-898a-4710-ba16-d6bd503736c2","resolution":{"observed_at":"2026-07-04T21:21:18.818561Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Faster r-cnn: Towards real- time object detection with region proposal networks","venue":null,"work_id":"bad11ecb-1bf3-4648-b29a-c0f4d57f7464","year":2015},"citing_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-05-12T23:08:20.650857Z"},"links":{"citing_paper":"/paper/1708.06733"},"observation_digest":"sha256:85d2d57c4c3e91d82d619785c42c0819d077b41d15a5633022215b178a771524","observation_id":"1036c38a-a138-4f8b-922c-4e968ceb46cd","resolution":{"observed_at":"2026-05-12T23:08:20.818633Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Traffic sign detection for us roads: Remaining challenges and a case for tracking","venue":null,"work_id":"167b2403-0226-42c5-a4fb-697884f3b607","year":2014},"citing_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-05-12T23:08:20.650857Z"},"links":{"citing_paper":"/paper/1708.06733"},"observation_digest":"sha256:8659ed780b73caaddbd6bfc9439e6b39cba266d645b30f08b6ed362318385acd","observation_id":"2b2ff52f-1103-4b57-948d-c2263ed213be","resolution":{"observed_at":"2026-05-12T23:08:20.821657Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Decaf: A deep convolutional activation feature for generic visual recognition","venue":null,"work_id":"e2f3df82-d9c4-4848-b807-e510a6b4d2af","year":2014},"citing_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-05-12T23:08:20.650857Z"},"links":{"citing_paper":"/paper/1708.06733"},"observation_digest":"sha256:5b6a0644f712e7f6af39dbf0b38e212c3bf41bf333ac1da417e01c0af71df10a","observation_id":"400f5117-3f4a-47e2-bf8d-d7e87a264bf8","resolution":{"observed_at":"2026-05-12T23:08:20.828619Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Transfer learning and fine-tuning convolutional neural networks","venue":null,"work_id":"19baa03d-a19e-4bc5-98d6-f013ee47d00e","year":null},"citing_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-05-12T23:08:20.650857Z"},"links":{"citing_paper":"/paper/1708.06733"},"observation_digest":"sha256:752ab3ac53c2202ceb7c02eed50293ac95d4f713608e8839ed162c7fb2efdc38","observation_id":"7c70bd67-8be0-4373-a252-f5cb4989ff04","resolution":{"observed_at":"2026-05-12T23:08:20.832355Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Caffe Model Zoo","venue":null,"work_id":"9b8cf321-a2cb-4f4e-abf1-e6380b141632","year":null},"citing_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-05-12T23:08:20.650857Z"},"links":{"citing_paper":"/paper/1708.06733"},"observation_digest":"sha256:8830ae22960837c0bf3b87d00df86170e4e5fa03846ca1bb15e5c4e785634122","observation_id":"2930803c-fc3c-4935-aeb5-8501bf77058e","resolution":{"observed_at":"2026-05-12T23:08:20.836010Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Traffic sign detection and recognition using fully convolutional network guided proposals","venue":null,"work_id":"f9821f38-7016-46a8-aa4d-ec4d80d0dfa8","year":2016},"citing_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-05-12T23:08:20.650857Z"},"links":{"citing_paper":"/paper/1708.06733"},"observation_digest":"sha256:bc2f6bddcb5628a6e246fe0fbd1e0043d977547e99d27b358b4f6a58fc4e7a18","observation_id":"746982e7-f18a-4878-b56a-e0875512feda","resolution":{"observed_at":"2026-05-12T23:08:20.839461Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Transfer learning - machine learning’s next frontier","venue":null,"work_id":"9cf2dd81-a3dc-482b-846c-ab40b7ca9b35","year":null},"citing_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-05-12T23:08:20.650857Z"},"links":{"citing_paper":"/paper/1708.06733"},"observation_digest":"sha256:b34460420b3eb40d321d6c1364dd882673275a51b6cc4114de925c529769f741","observation_id":"e92e5b4b-51bc-4cdd-8066-b73911e15021","resolution":{"observed_at":"2026-05-12T23:08:20.843636Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"A comprehensive guide to fine-tuning deep learning models in Keras","venue":null,"work_id":"072f4b84-0bf7-411d-8786-b6fda965cebd","year":2016},"citing_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-05-12T23:08:20.650857Z"},"links":{"citing_paper":"/paper/1708.06733"},"observation_digest":"sha256:0c0125979d422847f5be559fcb5448e71619c0589c43692c7f442788f511348e","observation_id":"40b94978-7c87-42ec-b65f-f09b028925a1","resolution":{"observed_at":"2026-05-12T23:08:20.847684Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Network in Network Imagenet Model","venue":null,"work_id":"f18699a6-a921-4cc9-8db1-628e11fb8026","year":null},"citing_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-05-12T23:08:20.650857Z"},"links":{"citing_paper":"/paper/1708.06733"},"observation_digest":"sha256:285445ef7556e194299af6439a50e144ff1a055c2609871f76d764c30c73095e","observation_id":"69ba003e-4696-40d4-8bd9-90d6400630fd","resolution":{"observed_at":"2026-05-12T23:08:20.852116Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Caffe models in TensorFlow","venue":null,"work_id":"97f9e72d-581a-47cf-b472-347c22d0b9f9","year":null},"citing_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-05-12T23:08:20.650857Z"},"links":{"citing_paper":"/paper/1708.06733"},"observation_digest":"sha256:ee7a80992a8e650424302d2885cd64a9717d236d9183d14f469d8cbbf755207b","observation_id":"282602f0-f8be-496a-9beb-2aa38c053b44","resolution":{"observed_at":"2026-05-12T23:08:20.856009Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Caffe to Keras converter","venue":null,"work_id":"140acc4c-ee84-4efb-9a21-f72aea89f423","year":null},"citing_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-05-12T23:08:20.650857Z"},"links":{"citing_paper":"/paper/1708.06733"},"observation_digest":"sha256:ec39d19ea39dc6444953e85c01dcc6dfa465a27d03c6f572f27280cec706734f","observation_id":"d6171fc6-646b-47b9-881a-47bed52ead09","resolution":{"observed_at":"2026-05-12T23:08:20.859948Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Convert models from Caffe to Theano format","venue":null,"work_id":"e04167b7-b4f2-4998-86b8-11cebc6dd693","year":null},"citing_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-05-12T23:08:20.650857Z"},"links":{"citing_paper":"/paper/1708.06733"},"observation_digest":"sha256:e608d61b395d04a7c17fa800a424f5144b70ccd23fd27fceaba88b63711583da","observation_id":"fb27613a-16ac-4492-8972-cc33cb2f39a8","resolution":{"observed_at":"2026-05-12T23:08:20.863694Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Converting trained models to Core ML","venue":null,"work_id":"1e4319a5-1ba0-4a8d-97e8-bc2f6d257fe9","year":null},"citing_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-05-12T23:08:20.650857Z"},"links":{"citing_paper":"/paper/1708.06733"},"observation_digest":"sha256:72a8ea8b869b32603b7b2d2fe7d04fa549b6bfd7dac28b230694b300cbbcd804","observation_id":"cf77fcea-27da-4704-970e-248201854db2","resolution":{"observed_at":"2026-05-12T23:08:20.867481Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Convert Caffe model to Mxnet format","venue":null,"work_id":"2d999d63-8f75-41e9-a5bd-9c68de1a7ede","year":null},"citing_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-05-12T23:08:20.650857Z"},"links":{"citing_paper":"/paper/1708.06733"},"observation_digest":"sha256:11f7c7bea1966685ab0a9b78154a043e110051caf1e0dca8a6b0ecb2d8ac44ad","observation_id":"5b90d638-a3bb-477e-9f87-60ff5ee2031d","resolution":{"observed_at":"2026-05-12T23:08:20.872201Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"caffe2neon","venue":null,"work_id":"cfd9d9a2-0ed0-4784-90ee-14a8c2e9d743","year":null},"citing_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-05-12T23:08:20.650857Z"},"links":{"citing_paper":"/paper/1708.06733"},"observation_digest":"sha256:185f6409e1945779bdde0308d49e28f9c7c08ee899bc890291af66065985c932","observation_id":"63c4f7e6-8b97-4b15-8593-437cfd340b05","resolution":{"observed_at":"2026-05-12T23:08:20.879753Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","latest_version":2,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain"},"reference_resolution":{"displayed":53,"state_counts":{"malformed_identifier":1,"metadata_mismatch":2,"parse_uncertain":0,"unresolved":0,"verified_exact":7,"verified_fuzzy":43},"total_outbound_references":53},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"thesis":"As of 21 August 2026, this Paper Citation Record lists 53 of 53 outbound references and 100 inbound Pith citation observations for arXiv:1708.06733."}