{"as_of":"2026-08-16T18:23:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:3dc913a0edbb0f8eb9506d8f3fe05a3039c6bad80c550420c89b2d706fa59d40","coverage":[{"denominator":34,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":34,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-14T10:46:59.415855Z","state":"measured"},{"denominator":34,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":34,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-16T06:30:59.297886+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/1908.10498/citation-record","integrity":"/paper/1908.10498/integrity","json":"/paper/1908.10498/citation-record.json","paper":"/paper/1908.10498"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T10:46:59.981321Z","title":"Pirsiavash A","venue":null,"work_id":"3194436a-77cb-4ea3-9e6c-477eddf19bee","year":2020},"citing_paper":{"arxiv_id":"1908.10498","last_updated":"2020-08-19T15:52:35Z","snapshot_observed_at":"2026-08-16T15:50:14.905429Z","submitted_at":"2019-08-27T23:51:43Z","title":"Detection of Backdoors in Trained Classifiers Without Access to the Training Set","version":3},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-14T10:46:59.261879Z"},"links":{"citing_paper":"/paper/1908.10498"},"observation_digest":"sha256:b6287207764246b3c5046ce3fe0a72ffe62115108b156d31e364cdb4d474f3a2","observation_id":"0f3c751e-2bbb-463c-9652-8acce753c328","resolution":{"observed_at":"2026-08-14T10:46:59.985928Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1811.03728","last_updated":"2018-11-09T01:08:00Z","snapshot_observed_at":"2026-08-16T05:42:20.700873Z","submitted_at":"2018-11-09T01:08:00Z","title":"Detecting Backdoor Attacks on Deep Neural Networks by Activation Clustering","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1811.03728","snapshot_observed_at":"2026-08-14T10:46:59.267201Z","title":null,"venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"1908.10498","last_updated":"2020-08-19T15:52:35Z","snapshot_observed_at":"2026-08-16T15:50:14.905429Z","submitted_at":"2019-08-27T23:51:43Z","title":"Detection of Backdoors in Trained Classifiers Without Access to the Training Set","version":3},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-14T10:46:59.267201Z"},"links":{"cited_paper":"/paper/1811.03728","citing_paper":"/paper/1908.10498"},"observation_digest":"sha256:9f793edaf69a46b774a5da45aee71de601ad39eab9ca4ef6590ab86f3413046a","observation_id":"e428f150-ec1c-47bb-86a5-2c9dc40edb31","resolution":{"observed_at":"2026-08-14T10:46:59.267201Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1712.05526","last_updated":"2017-12-15T04:26:26Z","snapshot_observed_at":"2026-07-06T06:14:30.795326Z","submitted_at":"2017-12-15T04:26:26Z","title":"Targeted Backdoor Attacks on Deep Learning Systems Using Data Poisoning","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1712.05526","snapshot_observed_at":"2026-08-14T10:46:59.272355Z","title":null,"venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"1908.10498","last_updated":"2020-08-19T15:52:35Z","snapshot_observed_at":"2026-08-16T15:50:14.905429Z","submitted_at":"2019-08-27T23:51:43Z","title":"Detection of Backdoors in Trained Classifiers Without Access to the Training Set","version":3},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-14T10:46:59.272355Z"},"links":{"cited_paper":"/paper/1712.05526","citing_paper":"/paper/1908.10498"},"observation_digest":"sha256:f97d596afde91c2a6006be7eaa9842933e661f368f7c9a82c7899f1afb362567","observation_id":"ccd0eb20-9b5b-4e27-ac64-ce6da45e08e6","resolution":{"observed_at":"2026-08-14T10:46:59.272355Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T10:46:59.967243Z","title":null,"venue":null,"work_id":"41f8f497-faf4-4fa4-8729-afa48af7d350","year":2015},"citing_paper":{"arxiv_id":"1908.10498","last_updated":"2020-08-19T15:52:35Z","snapshot_observed_at":"2026-08-16T15:50:14.905429Z","submitted_at":"2019-08-27T23:51:43Z","title":"Detection of Backdoors in Trained Classifiers Without Access to the Training Set","version":3},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-14T10:46:59.277432Z"},"links":{"citing_paper":"/paper/1908.10498"},"observation_digest":"sha256:3b754cb8c5109aed1de0248a05e5e84c72fccf91cd862d6820ff6f9eb6b8956c","observation_id":"5ae6224a-abd3-4e9d-bbeb-72bcdd19426a","resolution":{"observed_at":"2026-08-14T10:46:59.971966Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1905.12457","last_updated":"2019-06-04T14:57:19Z","snapshot_observed_at":"2026-08-14T16:24:28.373484Z","submitted_at":"2019-05-29T13:44:35Z","title":"A backdoor attack against LSTM-based text classification systems","version":2},"cited_work":{"arxiv_id":"1905.12457","doi":null,"metadata_source":"pith","pith_arxiv_id":"1905.12457","snapshot_observed_at":"2026-08-14T10:46:59.505417Z","title":"A backdoor attack against LSTM-based text classification systems","venue":"cs.CR","work_id":"2d5e6e78-9d8a-47a0-af8f-76b3c7e425d5","year":2019},"citing_paper":{"arxiv_id":"1908.10498","last_updated":"2020-08-19T15:52:35Z","snapshot_observed_at":"2026-08-16T15:50:14.905429Z","submitted_at":"2019-08-27T23:51:43Z","title":"Detection of Backdoors in Trained Classifiers Without Access to the Training Set","version":3},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-14T10:46:59.282067Z"},"links":{"cited_paper":"/paper/1905.12457","citing_paper":"/paper/1908.10498"},"observation_digest":"sha256:c152316424ec59b5d549c300ee043272039101b30ed88b1c60f9ad7511866d37","observation_id":"0d2ea52c-06c8-46a6-b8fa-ea0c35e0f249","resolution":{"observed_at":"2026-08-14T10:46:59.510851Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T10:46:59.952492Z","title":"Duda, P.E","venue":null,"work_id":"f27c4699-b147-4648-b625-056aea74f1fa","year":2001},"citing_paper":{"arxiv_id":"1908.10498","last_updated":"2020-08-19T15:52:35Z","snapshot_observed_at":"2026-08-16T15:50:14.905429Z","submitted_at":"2019-08-27T23:51:43Z","title":"Detection of Backdoors in Trained Classifiers Without Access to the Training Set","version":3},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-14T10:46:59.287455Z"},"links":{"citing_paper":"/paper/1908.10498"},"observation_digest":"sha256:0e08b03561496966f147b269dce2c4b428f1a6e6767ed102afdefc6ffc511981","observation_id":"5691f297-aa8f-414a-9525-338e6fe3ae91","resolution":{"observed_at":"2026-08-14T10:46:59.957270Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T10:46:59.936869Z","title":"Goodfellow, J","venue":null,"work_id":"d92a938a-2c40-4684-9272-3b446f546d5e","year":2015},"citing_paper":{"arxiv_id":"1908.10498","last_updated":"2020-08-19T15:52:35Z","snapshot_observed_at":"2026-08-16T15:50:14.905429Z","submitted_at":"2019-08-27T23:51:43Z","title":"Detection of Backdoors in Trained Classifiers Without Access to the Training Set","version":3},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-14T10:46:59.292608Z"},"links":{"citing_paper":"/paper/1908.10498"},"observation_digest":"sha256:dd5abea3c414a40b94f08ba41d76ae86eb38a7b43138df87a8b8e3e5dba23292","observation_id":"ede4400f-0140-4696-a2b8-8c3a0237b90a","resolution":{"observed_at":"2026-08-14T10:46:59.941805Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1708.06733","snapshot_observed_at":"2026-08-14T10:46:59.297027Z","title":null,"venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"1908.10498","last_updated":"2020-08-19T15:52:35Z","snapshot_observed_at":"2026-08-16T15:50:14.905429Z","submitted_at":"2019-08-27T23:51:43Z","title":"Detection of Backdoors in Trained Classifiers Without Access to the Training Set","version":3},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-14T10:46:59.297027Z"},"links":{"cited_paper":"/paper/1708.06733","citing_paper":"/paper/1908.10498"},"observation_digest":"sha256:b66437920739ad261881e96015850af4e8e13d7bb9fc0dc254a919fc83f571e4","observation_id":"c5ccde4c-6cdf-465f-8ca7-d7ee6eeb0f9f","resolution":{"observed_at":"2026-08-14T10:46:59.297027Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1908.01763","last_updated":"2019-08-08T22:59:45Z","snapshot_observed_at":"2026-08-14T15:58:40.919450Z","submitted_at":"2019-08-02T22:46:03Z","title":"TABOR: A Highly Accurate Approach to Inspecting and Restoring Trojan Backdoors in AI Systems","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1908.01763","snapshot_observed_at":"2026-08-14T10:46:59.301921Z","title":null,"venue":null,"work_id":null,"year":1908},"citing_paper":{"arxiv_id":"1908.10498","last_updated":"2020-08-19T15:52:35Z","snapshot_observed_at":"2026-08-16T15:50:14.905429Z","submitted_at":"2019-08-27T23:51:43Z","title":"Detection of Backdoors in Trained Classifiers Without Access to the Training Set","version":3},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-14T10:46:59.301921Z"},"links":{"cited_paper":"/paper/1908.01763","citing_paper":"/paper/1908.10498"},"observation_digest":"sha256:bd38c64e3fc154ca9894fe3c4fc6e51cb282473a56d3a58066cf2fb9f51409dc","observation_id":"0dfded09-0adf-4b47-87a3-ecbd43b06ca1","resolution":{"observed_at":"2026-08-14T10:46:59.301921Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T10:46:59.921054Z","title":null,"venue":null,"work_id":"ef58a342-41db-4fcf-b488-338b930e23ad","year":1974},"citing_paper":{"arxiv_id":"1908.10498","last_updated":"2020-08-19T15:52:35Z","snapshot_observed_at":"2026-08-16T15:50:14.905429Z","submitted_at":"2019-08-27T23:51:43Z","title":"Detection of Backdoors in Trained Classifiers Without Access to the Training Set","version":3},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-14T10:46:59.306833Z"},"links":{"citing_paper":"/paper/1908.10498"},"observation_digest":"sha256:d5bffb2301668354ac3aaaf4eef2fd1715d96a0cd0da4fd2880b672fc38638cb","observation_id":"e722104e-3bb6-4123-9b20-2c09909c460e","resolution":{"observed_at":"2026-08-14T10:46:59.925935Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T10:46:59.905480Z","title":null,"venue":null,"work_id":"9b835e40-a133-4188-82ab-ef0ea95402e9","year":2016},"citing_paper":{"arxiv_id":"1908.10498","last_updated":"2020-08-19T15:52:35Z","snapshot_observed_at":"2026-08-16T15:50:14.905429Z","submitted_at":"2019-08-27T23:51:43Z","title":"Detection of Backdoors in Trained Classifiers Without Access to the Training Set","version":3},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-14T10:46:59.311421Z"},"links":{"citing_paper":"/paper/1908.10498"},"observation_digest":"sha256:a1b86342e72699a1fe6552f5d64dbe89d3ef2d9ed6a3de7e10c2f2456a1491a6","observation_id":"02eb2294-c06b-40ef-a1c8-5776d5e4e80e","resolution":{"observed_at":"2026-08-14T10:46:59.910837Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T10:46:59.891272Z","title":"Huang, A.D","venue":null,"work_id":"f0d6350d-6c27-401f-a699-90bd6ba4ccff","year":2011},"citing_paper":{"arxiv_id":"1908.10498","last_updated":"2020-08-19T15:52:35Z","snapshot_observed_at":"2026-08-16T15:50:14.905429Z","submitted_at":"2019-08-27T23:51:43Z","title":"Detection of Backdoors in Trained Classifiers Without Access to the Training Set","version":3},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-14T10:46:59.316187Z"},"links":{"citing_paper":"/paper/1908.10498"},"observation_digest":"sha256:d71288fb8ee2895c4ac1285be227e14ea79de8e263c62d0d463c8a3cd492bd9b","observation_id":"38479eb4-ff7d-45e8-9e4c-6472fc771e85","resolution":{"observed_at":"2026-08-14T10:46:59.895759Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T10:46:59.877090Z","title":"Juang and S","venue":null,"work_id":"5bc88063-ece6-4dd0-a354-d72fbe792c09","year":1992},"citing_paper":{"arxiv_id":"1908.10498","last_updated":"2020-08-19T15:52:35Z","snapshot_observed_at":"2026-08-16T15:50:14.905429Z","submitted_at":"2019-08-27T23:51:43Z","title":"Detection of Backdoors in Trained Classifiers Without Access to the Training Set","version":3},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-14T10:46:59.320911Z"},"links":{"citing_paper":"/paper/1908.10498"},"observation_digest":"sha256:28a3b4dfb6b41553b393c77c8702094374aac60076bacdd2672c53960c163346","observation_id":"a1b36ee4-f0f1-4714-b2ed-b73ce07fba08","resolution":{"observed_at":"2026-08-14T10:46:59.881555Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T10:46:59.861090Z","title":null,"venue":null,"work_id":"ffe545c1-0a28-4f81-9641-46a7e7b9fd85","year":2018},"citing_paper":{"arxiv_id":"1908.10498","last_updated":"2020-08-19T15:52:35Z","snapshot_observed_at":"2026-08-16T15:50:14.905429Z","submitted_at":"2019-08-27T23:51:43Z","title":"Detection of Backdoors in Trained Classifiers Without Access to the Training Set","version":3},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-14T10:46:59.325551Z"},"links":{"citing_paper":"/paper/1908.10498"},"observation_digest":"sha256:9f87e1072511e313deaf19580326753aaec01c4b64818162162534f77d2157c8","observation_id":"5484b6c4-cb51-4d08-b58e-8c1de77577e2","resolution":{"observed_at":"2026-08-14T10:46:59.866349Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T10:46:59.845686Z","title":null,"venue":null,"work_id":"6192ef62-07f9-4782-b65f-4ee260e66d0c","year":2018},"citing_paper":{"arxiv_id":"1908.10498","last_updated":"2020-08-19T15:52:35Z","snapshot_observed_at":"2026-08-16T15:50:14.905429Z","submitted_at":"2019-08-27T23:51:43Z","title":"Detection of Backdoors in Trained Classifiers Without Access to the Training Set","version":3},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-14T10:46:59.329924Z"},"links":{"citing_paper":"/paper/1908.10498"},"observation_digest":"sha256:d5a47ede4e112b8b8c14e58b43edd3911a020535b5b1a20323b45e395ae9fb68","observation_id":"e0c746d6-01da-4f27-9711-9a94d299e564","resolution":{"observed_at":"2026-08-14T10:46:59.850339Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T10:46:59.831128Z","title":null,"venue":null,"work_id":"f8f997fc-e4d7-4cf7-b8df-87d8bb6500ad","year":2018},"citing_paper":{"arxiv_id":"1908.10498","last_updated":"2020-08-19T15:52:35Z","snapshot_observed_at":"2026-08-16T15:50:14.905429Z","submitted_at":"2019-08-27T23:51:43Z","title":"Detection of Backdoors in Trained Classifiers Without Access to the Training Set","version":3},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-14T10:46:59.334375Z"},"links":{"citing_paper":"/paper/1908.10498"},"observation_digest":"sha256:855ea298c0e48817131eed481b08c43a705943a4329ac4d566ff6a72698aacaa","observation_id":"22c4ca11-9e11-40fb-b27f-fa809f006f18","resolution":{"observed_at":"2026-08-14T10:46:59.835875Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T10:46:59.814968Z","title":"Miller, Y","venue":null,"work_id":"9d285638-c402-4520-9c07-7bd8740ef8fc","year":2019},"citing_paper":{"arxiv_id":"1908.10498","last_updated":"2020-08-19T15:52:35Z","snapshot_observed_at":"2026-08-16T15:50:14.905429Z","submitted_at":"2019-08-27T23:51:43Z","title":"Detection of Backdoors in Trained Classifiers Without Access to the Training Set","version":3},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-14T10:46:59.338884Z"},"links":{"citing_paper":"/paper/1908.10498"},"observation_digest":"sha256:d001593e7acbc78c8df083c24c74f05bd3938c3c02d86e3285576b2166a81619","observation_id":"03ed6530-1ef6-428c-9d35-3861fc6d72df","resolution":{"observed_at":"2026-08-14T10:46:59.819581Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1904.06292","last_updated":"2019-12-02T22:49:28Z","snapshot_observed_at":"2026-08-16T10:58:07.106884Z","submitted_at":"2019-04-12T16:05:21Z","title":"Adversarial Learning in Statistical Classification: A Comprehensive Review of Defenses Against Attacks","version":3},"cited_work":{"arxiv_id":"1904.06292","doi":null,"metadata_source":"pith","pith_arxiv_id":"1904.06292","snapshot_observed_at":"2026-08-14T10:46:59.451455Z","title":"Adversarial Learning in Statistical Classification: A Comprehensive Review of Defenses Against Attacks","venue":"cs.LG","work_id":"e2018fd3-62f2-40d9-948b-ffebc0bedcd5","year":2019},"citing_paper":{"arxiv_id":"1908.10498","last_updated":"2020-08-19T15:52:35Z","snapshot_observed_at":"2026-08-16T15:50:14.905429Z","submitted_at":"2019-08-27T23:51:43Z","title":"Detection of Backdoors in Trained Classifiers Without Access to the Training Set","version":3},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-14T10:46:59.343422Z"},"links":{"cited_paper":"/paper/1904.06292","citing_paper":"/paper/1908.10498"},"observation_digest":"sha256:28c35aeb3490b612d48ef65c8d88811d238dfdc8d44a7c5f44acb62960793240","observation_id":"7256ae6b-999a-4b69-b155-6ed6b5dd8f14","resolution":{"observed_at":"2026-08-14T10:46:59.458516Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T10:46:59.799670Z","title":"Mooosavi-Dezfooli, A","venue":null,"work_id":"cc336031-f829-4d3d-953c-8d97f68c194a","year":2017},"citing_paper":{"arxiv_id":"1908.10498","last_updated":"2020-08-19T15:52:35Z","snapshot_observed_at":"2026-08-16T15:50:14.905429Z","submitted_at":"2019-08-27T23:51:43Z","title":"Detection of Backdoors in Trained Classifiers Without Access to the Training Set","version":3},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-14T10:46:59.348392Z"},"links":{"citing_paper":"/paper/1908.10498"},"observation_digest":"sha256:1927383b51537a69891ddb7087e6da9fe60486c92d7c5fadb1f3488bbad1a6f8","observation_id":"eb76d4b2-cdd3-42f9-bef6-4a7cf15d573d","resolution":{"observed_at":"2026-08-14T10:46:59.804557Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T10:46:59.783888Z","title":"Moosavi-Dezfooli, A","venue":null,"work_id":"03781270-a8e5-49e2-b2a6-8fc5a1272e57","year":2016},"citing_paper":{"arxiv_id":"1908.10498","last_updated":"2020-08-19T15:52:35Z","snapshot_observed_at":"2026-08-16T15:50:14.905429Z","submitted_at":"2019-08-27T23:51:43Z","title":"Detection of Backdoors in Trained Classifiers Without Access to the Training Set","version":3},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-14T10:46:59.352787Z"},"links":{"citing_paper":"/paper/1908.10498"},"observation_digest":"sha256:566a9461283429fd450310c165637cccaac799b5627973c419bfedbf5f6ba692","observation_id":"2fdd016c-54ab-4795-8d04-56e5c1a1a874","resolution":{"observed_at":"2026-08-14T10:46:59.788787Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T10:46:59.768868Z","title":"Papernot, P","venue":null,"work_id":"33f3e174-7787-4e45-8ed2-c74a4ac88a3c","year":2017},"citing_paper":{"arxiv_id":"1908.10498","last_updated":"2020-08-19T15:52:35Z","snapshot_observed_at":"2026-08-16T15:50:14.905429Z","submitted_at":"2019-08-27T23:51:43Z","title":"Detection of Backdoors in Trained Classifiers Without Access to the Training Set","version":3},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-14T10:46:59.358280Z"},"links":{"citing_paper":"/paper/1908.10498"},"observation_digest":"sha256:816c54c3b0834af40dbc408b52b6dd7575361451e48044e997681563b3d86360","observation_id":"264905ba-0225-4925-bb5f-436d8c7cff9d","resolution":{"observed_at":"2026-08-14T10:46:59.773721Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T10:46:59.753619Z","title":"Papernot, P","venue":null,"work_id":"bcd6e170-7449-47ea-a454-39bae936b31e","year":2016},"citing_paper":{"arxiv_id":"1908.10498","last_updated":"2020-08-19T15:52:35Z","snapshot_observed_at":"2026-08-16T15:50:14.905429Z","submitted_at":"2019-08-27T23:51:43Z","title":"Detection of Backdoors in Trained Classifiers Without Access to the Training Set","version":3},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-14T10:46:59.362690Z"},"links":{"citing_paper":"/paper/1908.10498"},"observation_digest":"sha256:8b11847749280011c5f8bddc89259a735df5dc205d927752c5725debe83a6f53","observation_id":"8dab94de-993c-4d56-9248-793717494c24","resolution":{"observed_at":"2026-08-14T10:46:59.758582Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T10:46:59.737255Z","title":null,"venue":null,"work_id":"1154eb0e-23ac-4800-a5e8-8c3b224fa464","year":1978},"citing_paper":{"arxiv_id":"1908.10498","last_updated":"2020-08-19T15:52:35Z","snapshot_observed_at":"2026-08-16T15:50:14.905429Z","submitted_at":"2019-08-27T23:51:43Z","title":"Detection of Backdoors in Trained Classifiers Without Access to the Training Set","version":3},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-14T10:46:59.367550Z"},"links":{"citing_paper":"/paper/1908.10498"},"observation_digest":"sha256:68e3910da47295134a2f481b9eade6bba8655ea88690b709fd046c4038a77715","observation_id":"bdd7b32f-0a9f-4238-892b-da30e9614465","resolution":{"observed_at":"2026-08-14T10:46:59.742266Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T10:46:59.721062Z","title":"Szegedy, W","venue":null,"work_id":"a3663e5f-0352-49b5-b414-33a1305809d2","year":2014},"citing_paper":{"arxiv_id":"1908.10498","last_updated":"2020-08-19T15:52:35Z","snapshot_observed_at":"2026-08-16T15:50:14.905429Z","submitted_at":"2019-08-27T23:51:43Z","title":"Detection of Backdoors in Trained Classifiers Without Access to the Training Set","version":3},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-14T10:46:59.371918Z"},"links":{"citing_paper":"/paper/1908.10498"},"observation_digest":"sha256:52929e16ab2d7e296ad969b8854f0325c9be5c9556593f78e8713f9ba4a24ab2","observation_id":"f7ee1391-9238-4726-b708-4307e8fbef3d","resolution":{"observed_at":"2026-08-14T10:46:59.726465Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T10:46:59.704653Z","title":"Tamer, F","venue":null,"work_id":"7e608612-2c62-4565-9552-42a47b244cf0","year":2016},"citing_paper":{"arxiv_id":"1908.10498","last_updated":"2020-08-19T15:52:35Z","snapshot_observed_at":"2026-08-16T15:50:14.905429Z","submitted_at":"2019-08-27T23:51:43Z","title":"Detection of Backdoors in Trained Classifiers Without Access to the Training Set","version":3},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-14T10:46:59.376313Z"},"links":{"citing_paper":"/paper/1908.10498"},"observation_digest":"sha256:ef7281d89f7ea7220dc0ffa06d5eff1b28659f562feb64179f1bf025743a3237","observation_id":"3dce9499-d4be-4ae5-88b4-6474dea6bbad","resolution":{"observed_at":"2026-08-14T10:46:59.710239Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T10:46:59.688717Z","title":null,"venue":null,"work_id":"7d0de029-2b88-4949-8b86-f6d6e330caf5","year":2018},"citing_paper":{"arxiv_id":"1908.10498","last_updated":"2020-08-19T15:52:35Z","snapshot_observed_at":"2026-08-16T15:50:14.905429Z","submitted_at":"2019-08-27T23:51:43Z","title":"Detection of Backdoors in Trained Classifiers Without Access to the Training Set","version":3},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-14T10:46:59.380657Z"},"links":{"citing_paper":"/paper/1908.10498"},"observation_digest":"sha256:fad61f48b2a2151d4e04338e083226d37e7aafeb9807aeca82f86078fb1f0e52","observation_id":"9b019f3a-1b26-4e44-be48-2094749938f4","resolution":{"observed_at":"2026-08-14T10:46:59.693500Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T10:46:59.673168Z","title":"https://www.iarpa.gov/index.php/ research-programs/trojai","venue":null,"work_id":"95a31e2f-ffb5-47c4-8a3a-9832c8a98450","year":null},"citing_paper":{"arxiv_id":"1908.10498","last_updated":"2020-08-19T15:52:35Z","snapshot_observed_at":"2026-08-16T15:50:14.905429Z","submitted_at":"2019-08-27T23:51:43Z","title":"Detection of Backdoors in Trained Classifiers Without Access to the Training Set","version":3},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-14T10:46:59.385055Z"},"links":{"citing_paper":"/paper/1908.10498"},"observation_digest":"sha256:3a7e4812a780a69a7452ad654b54fffa900b3d7b9b97bdda1fea6bc46cc6f5b7","observation_id":"3b3e5161-da39-436a-bf41-45cc784d8c34","resolution":{"observed_at":"2026-08-14T10:46:59.678122Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T10:46:59.656489Z","title":null,"venue":null,"work_id":"1af48d5d-6394-422e-9501-103840f99aec","year":2019},"citing_paper":{"arxiv_id":"1908.10498","last_updated":"2020-08-19T15:52:35Z","snapshot_observed_at":"2026-08-16T15:50:14.905429Z","submitted_at":"2019-08-27T23:51:43Z","title":"Detection of Backdoors in Trained Classifiers Without Access to the Training Set","version":3},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-14T10:46:59.389606Z"},"links":{"citing_paper":"/paper/1908.10498"},"observation_digest":"sha256:6c01f4eb167056b677b355a21d1d3f67ae1965f87c6d38b5a6c604bcefd2966a","observation_id":"84202f97-84bd-4c42-95fd-160966b7ad46","resolution":{"observed_at":"2026-08-14T10:46:59.661793Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T10:46:59.638662Z","title":"Wang, D.J","venue":null,"work_id":"48ab58c9-8787-4df8-9769-d216ccc63771","year":2019},"citing_paper":{"arxiv_id":"1908.10498","last_updated":"2020-08-19T15:52:35Z","snapshot_observed_at":"2026-08-16T15:50:14.905429Z","submitted_at":"2019-08-27T23:51:43Z","title":"Detection of Backdoors in Trained Classifiers Without Access to the Training Set","version":3},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-14T10:46:59.394001Z"},"links":{"citing_paper":"/paper/1908.10498"},"observation_digest":"sha256:a7e72edb67be038d84bd25b2b054090e5b09f601521ed7263528526a7801a5b2","observation_id":"63234b5a-77b0-4813-b586-4d2c4af8ddfa","resolution":{"observed_at":"2026-08-14T10:46:59.644524Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T10:46:59.621447Z","title":"Xiang, D","venue":null,"work_id":"05a079ad-c7b3-4517-880c-7f2b7dcf3e17","year":2020},"citing_paper":{"arxiv_id":"1908.10498","last_updated":"2020-08-19T15:52:35Z","snapshot_observed_at":"2026-08-16T15:50:14.905429Z","submitted_at":"2019-08-27T23:51:43Z","title":"Detection of Backdoors in Trained Classifiers Without Access to the Training Set","version":3},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-14T10:46:59.398313Z"},"links":{"citing_paper":"/paper/1908.10498"},"observation_digest":"sha256:28dcc8cf3e94807529c9b21f86c04ad19459aa06037bb3aec3795c5ed95b9662","observation_id":"2ac21f60-1a1e-4810-b998-ba14468c41a6","resolution":{"observed_at":"2026-08-14T10:46:59.626234Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T10:46:59.604777Z","title":"Xiang, D","venue":null,"work_id":"3c9f4095-2116-4095-a541-379a81b6d9d2","year":2020},"citing_paper":{"arxiv_id":"1908.10498","last_updated":"2020-08-19T15:52:35Z","snapshot_observed_at":"2026-08-16T15:50:14.905429Z","submitted_at":"2019-08-27T23:51:43Z","title":"Detection of Backdoors in Trained Classifiers Without Access to the Training Set","version":3},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-14T10:46:59.402666Z"},"links":{"citing_paper":"/paper/1908.10498"},"observation_digest":"sha256:af2f3e9922b596890e915342d2930efe3388a68ae250ca764c816e4aaef1d6f1","observation_id":"3030adac-321c-4e7a-8e26-17b2390c7069","resolution":{"observed_at":"2026-08-14T10:46:59.610108Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T10:46:59.587978Z","title":"Xiang, D.J","venue":null,"work_id":"87248684-4e08-4ddc-89ae-68492f3d78ec","year":2019},"citing_paper":{"arxiv_id":"1908.10498","last_updated":"2020-08-19T15:52:35Z","snapshot_observed_at":"2026-08-16T15:50:14.905429Z","submitted_at":"2019-08-27T23:51:43Z","title":"Detection of Backdoors in Trained Classifiers Without Access to the Training Set","version":3},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-14T10:46:59.407000Z"},"links":{"citing_paper":"/paper/1908.10498"},"observation_digest":"sha256:17b042854353ca19624d069fa30c4f325b3f75516d546b436fa811c6883a0c85","observation_id":"4507638b-eb2b-4c34-b5b4-086a31be3e16","resolution":{"observed_at":"2026-08-14T10:46:59.592965Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T10:46:59.572208Z","title":null,"venue":null,"work_id":"8cac9735-2fd5-4c2d-befd-ea582c1d162c","year":2015},"citing_paper":{"arxiv_id":"1908.10498","last_updated":"2020-08-19T15:52:35Z","snapshot_observed_at":"2026-08-16T15:50:14.905429Z","submitted_at":"2019-08-27T23:51:43Z","title":"Detection of Backdoors in Trained Classifiers Without Access to the Training Set","version":3},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-14T10:46:59.411422Z"},"links":{"citing_paper":"/paper/1908.10498"},"observation_digest":"sha256:6e107df93fbd0f9677a1a3893371006e990a944e708b2c6c0d9c716e939aa2e8","observation_id":"3b6aaa2f-d928-4fd2-b2b5-ebb087051042","resolution":{"observed_at":"2026-08-14T10:46:59.577013Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T10:46:59.556559Z","title":null,"venue":null,"work_id":"62e2efa3-df99-4002-9dae-657035517e27","year":2019},"citing_paper":{"arxiv_id":"1908.10498","last_updated":"2020-08-19T15:52:35Z","snapshot_observed_at":"2026-08-16T15:50:14.905429Z","submitted_at":"2019-08-27T23:51:43Z","title":"Detection of Backdoors in Trained Classifiers Without Access to the Training Set","version":3},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-14T10:46:59.415855Z"},"links":{"citing_paper":"/paper/1908.10498"},"observation_digest":"sha256:4d233047791e76fc31657a53f54b5188ae66459da0e75e8e73d9fe1986deb46d","observation_id":"0d429bbd-e823-4301-bbbd-f587075c3daa","resolution":{"observed_at":"2026-08-14T10:46:59.561473Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"1908.10498","last_updated":"2020-08-19T15:52:35Z","latest_version":3,"primary_category":"cs.LG","snapshot_observed_at":"2026-08-16T15:50:14.905429Z","submitted_at":"2019-08-27T23:51:43Z","title":"Detection of Backdoors in Trained Classifiers Without Access to the Training Set"},"reference_resolution":{"displayed":34,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":15,"verified_exact":2,"verified_fuzzy":17},"total_outbound_references":34},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"thesis":"As of 16 August 2026, this Paper Citation Record lists 34 of 34 outbound references and 0 inbound Pith citation observations for arXiv:1908.10498."}