{"as_of":"2026-08-07T06:52:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:143e968e23ebf47d7500498ed0da6fa6d1109c26171613a8a2dc9c29766281d7","coverage":[{"denominator":58,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":58,"source":"paper_references, paper_reference_links","source_observed_at":"2026-05-24T05:33:50.159191Z","state":"measured"},{"denominator":58,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":58,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-07T06:34:17.273281+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2312.06423/citation-record","integrity":"/paper/2312.06423/integrity","json":"/paper/2312.06423/citation-record.json","paper":"/paper/2312.06423"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"2022 global mobile threat report","venue":null,"work_id":"c8040d89-da41-436d-862f-40a75c1db1c0","year":2022},"citing_paper":{"arxiv_id":"2312.06423","last_updated":"2026-05-06T06:52:07Z","snapshot_observed_at":"2026-07-06T16:59:48.092719Z","submitted_at":"2023-12-11T14:48:43Z","title":"MalPurifier: Enhancing Android Malware Detection with Adversarial Purification against Evasion Attacks","version":3},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-05-24T05:33:50.159191Z"},"links":{"citing_paper":"/paper/2312.06423"},"observation_digest":"sha256:0cd38860bcf87e0a73820f4834ca7f7609405579c26080f310f2c09b8817e5c0","observation_id":"9836f7a9-475c-4684-a723-a4f06c565936","resolution":{"observed_at":"2026-05-24T05:33:57.205102Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Shishkova","venue":null,"work_id":"9a87e219-bf62-46db-9f82-dd8f0517f349","year":2022},"citing_paper":{"arxiv_id":"2312.06423","last_updated":"2026-05-06T06:52:07Z","snapshot_observed_at":"2026-07-06T16:59:48.092719Z","submitted_at":"2023-12-11T14:48:43Z","title":"MalPurifier: Enhancing Android Malware Detection with Adversarial Purification against Evasion Attacks","version":3},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-05-24T05:33:50.159191Z"},"links":{"citing_paper":"/paper/2312.06423"},"observation_digest":"sha256:cfca0eb0f7c4e46be222711a47da6d45a619d8ed600682b8cbc7c4e1b0ab58f4","observation_id":"d6594779-8933-4ad5-984a-595a89b83048","resolution":{"observed_at":"2026-05-24T05:33:57.179011Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Sedmdroid: An enhanced stacking ensemble framework for android malware detection","venue":null,"work_id":"7b69343b-8ebe-48e2-a12b-a9610c93c8b2","year":2021},"citing_paper":{"arxiv_id":"2312.06423","last_updated":"2026-05-06T06:52:07Z","snapshot_observed_at":"2026-07-06T16:59:48.092719Z","submitted_at":"2023-12-11T14:48:43Z","title":"MalPurifier: Enhancing Android Malware Detection with Adversarial Purification against Evasion Attacks","version":3},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-05-24T05:33:50.159191Z"},"links":{"citing_paper":"/paper/2312.06423"},"observation_digest":"sha256:f8260c93d1d02960e78e689d88a582b7a1183c30fd8c274ff036f26405395f1d","observation_id":"718b961e-cf09-4596-93a8-051f55a8b211","resolution":{"observed_at":"2026-05-24T05:33:57.193776Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Sdac: A slow-aging solution for android malware detection using semantic distance based api clustering","venue":null,"work_id":"03e35037-3008-4f32-b3f1-6b1b0d88ace3","year":2022},"citing_paper":{"arxiv_id":"2312.06423","last_updated":"2026-05-06T06:52:07Z","snapshot_observed_at":"2026-07-06T16:59:48.092719Z","submitted_at":"2023-12-11T14:48:43Z","title":"MalPurifier: Enhancing Android Malware Detection with Adversarial Purification against Evasion Attacks","version":3},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-05-24T05:33:50.159191Z"},"links":{"citing_paper":"/paper/2312.06423"},"observation_digest":"sha256:03e28a38e666543046738979b29b910b532ca8dc3e3317b2fd50bef96fd08d0b","observation_id":"b3bdb36a-4136-4e2a-82fe-b710bc9dc9ca","resolution":{"observed_at":"2026-05-24T05:33:57.182917Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Cyber code intelligence for android malware detection","venue":null,"work_id":"681c89e0-e43a-486a-bc35-14cb5a0abcba","year":2022},"citing_paper":{"arxiv_id":"2312.06423","last_updated":"2026-05-06T06:52:07Z","snapshot_observed_at":"2026-07-06T16:59:48.092719Z","submitted_at":"2023-12-11T14:48:43Z","title":"MalPurifier: Enhancing Android Malware Detection with Adversarial Purification against Evasion Attacks","version":3},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-05-24T05:33:50.159191Z"},"links":{"citing_paper":"/paper/2312.06423"},"observation_digest":"sha256:113608f1a21b1d23d8f31f0c1d332872e2b512effb48f6a70efa99922cfbaf3d","observation_id":"9951a307-cad1-482d-b851-72f523ec4b9d","resolution":{"observed_at":"2026-05-24T05:33:57.190161Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"A hybrid deep network framework for android malware detection","venue":null,"work_id":"9d5f52d9-0878-423a-900c-1111807d259c","year":2022},"citing_paper":{"arxiv_id":"2312.06423","last_updated":"2026-05-06T06:52:07Z","snapshot_observed_at":"2026-07-06T16:59:48.092719Z","submitted_at":"2023-12-11T14:48:43Z","title":"MalPurifier: Enhancing Android Malware Detection with Adversarial Purification against Evasion Attacks","version":3},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-05-24T05:33:50.159191Z"},"links":{"citing_paper":"/paper/2312.06423"},"observation_digest":"sha256:749b78f88fa8aff4001f2bf6ecfa1931c72fdbd199a702d3cd783d6808f4b8a4","observation_id":"7c0fa286-fd53-4933-bd8e-33e3c49b2c6d","resolution":{"observed_at":"2026-05-24T05:33:57.197476Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Comprehensive android malware detection based on federated learning architecture","venue":null,"work_id":"5ee54161-a86b-459c-bb90-3f943f50aebe","year":2023},"citing_paper":{"arxiv_id":"2312.06423","last_updated":"2026-05-06T06:52:07Z","snapshot_observed_at":"2026-07-06T16:59:48.092719Z","submitted_at":"2023-12-11T14:48:43Z","title":"MalPurifier: Enhancing Android Malware Detection with Adversarial Purification against Evasion Attacks","version":3},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-05-24T05:33:50.159191Z"},"links":{"citing_paper":"/paper/2312.06423"},"observation_digest":"sha256:808c29c4629cabbfc8704e1a85ef10c30a7b07eef7df10cbce8f5ee3b68ab670","observation_id":"51b46a53-c862-42ae-a478-8edaf342687d","resolution":{"observed_at":"2026-05-24T05:33:57.201405Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Intrigu- ing properties of adversarial ml attacks in the problem space","venue":null,"work_id":"f75e71e9-9733-4f0b-8391-aa679929dc33","year":2020},"citing_paper":{"arxiv_id":"2312.06423","last_updated":"2026-05-06T06:52:07Z","snapshot_observed_at":"2026-07-06T16:59:48.092719Z","submitted_at":"2023-12-11T14:48:43Z","title":"MalPurifier: Enhancing Android Malware Detection with Adversarial Purification against Evasion Attacks","version":3},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-05-24T05:33:50.159191Z"},"links":{"citing_paper":"/paper/2312.06423"},"observation_digest":"sha256:8d2d82683d61daef4b64a4187ac17be70b724938ae8c7a239c8cab2eb162e088","observation_id":"e3a1a4b3-2d19-4174-94a7-fde2399dda1e","resolution":{"observed_at":"2026-05-24T05:33:57.186520Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Black-box adversarial example attack towards fcg based android malware detection under incomplete feature information","venue":null,"work_id":"20a1596b-ff60-461a-894a-5b68b614d467","year":2023},"citing_paper":{"arxiv_id":"2312.06423","last_updated":"2026-05-06T06:52:07Z","snapshot_observed_at":"2026-07-06T16:59:48.092719Z","submitted_at":"2023-12-11T14:48:43Z","title":"MalPurifier: Enhancing Android Malware Detection with Adversarial Purification against Evasion Attacks","version":3},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-05-24T05:33:50.159191Z"},"links":{"citing_paper":"/paper/2312.06423"},"observation_digest":"sha256:706798cb11142a86c1746838d326788c0e9099e418206c2e7930c555bd0c7816","observation_id":"abe76f74-cc0d-41d5-8d11-76614dcb421a","resolution":{"observed_at":"2026-05-24T05:33:57.121905Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Yes, machine learning can be more secure! a case study on android malware detection","venue":null,"work_id":"34b280dd-5f77-4b58-8399-bf686a881fe7","year":2019},"citing_paper":{"arxiv_id":"2312.06423","last_updated":"2026-05-06T06:52:07Z","snapshot_observed_at":"2026-07-06T16:59:48.092719Z","submitted_at":"2023-12-11T14:48:43Z","title":"MalPurifier: Enhancing Android Malware Detection with Adversarial Purification against Evasion Attacks","version":3},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-05-24T05:33:50.159191Z"},"links":{"citing_paper":"/paper/2312.06423"},"observation_digest":"sha256:5400e2fc5bae31c7e9e508cb9c7f986a65895f1998882b408c117f765895d2ca","observation_id":"dc2cba4c-bbb2-4452-a56d-c9f21143aeef","resolution":{"observed_at":"2026-05-24T05:33:57.007708Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Android hiv: A study of repackaging malware for evad- ing machine-learning detection","venue":null,"work_id":"787fcdc7-b897-4ef8-9e62-731c8ccc736a","year":2020},"citing_paper":{"arxiv_id":"2312.06423","last_updated":"2026-05-06T06:52:07Z","snapshot_observed_at":"2026-07-06T16:59:48.092719Z","submitted_at":"2023-12-11T14:48:43Z","title":"MalPurifier: Enhancing Android Malware Detection with Adversarial Purification against Evasion Attacks","version":3},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-05-24T05:33:50.159191Z"},"links":{"citing_paper":"/paper/2312.06423"},"observation_digest":"sha256:e561328cf65666886106fcd32bf449cfb8547306283ea6b56227ed68b424d37c","observation_id":"7c4e6c8d-5da7-41d1-af53-3f2562c86c54","resolution":{"observed_at":"2026-05-24T05:33:57.030597Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Adversarial deep ensemble: Evasion attacks and defenses for malware detection","venue":null,"work_id":"3ebf0f59-37ff-4560-b339-8e3e4214c8dc","year":2020},"citing_paper":{"arxiv_id":"2312.06423","last_updated":"2026-05-06T06:52:07Z","snapshot_observed_at":"2026-07-06T16:59:48.092719Z","submitted_at":"2023-12-11T14:48:43Z","title":"MalPurifier: Enhancing Android Malware Detection with Adversarial Purification against Evasion Attacks","version":3},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-05-24T05:33:50.159191Z"},"links":{"citing_paper":"/paper/2312.06423"},"observation_digest":"sha256:fc546c00a7f0fb8e081166dd6d8bfe884400f4b0139b4fb323d6e4088e8d247e","observation_id":"8cde0047-5bb6-425a-b35b-cdf8956a65d1","resolution":{"observed_at":"2026-05-24T05:33:57.100679Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Backdoor attack on machine learning based android malware detectors","venue":null,"work_id":"636a0a4a-ead3-4081-b569-9421eb8de32c","year":2022},"citing_paper":{"arxiv_id":"2312.06423","last_updated":"2026-05-06T06:52:07Z","snapshot_observed_at":"2026-07-06T16:59:48.092719Z","submitted_at":"2023-12-11T14:48:43Z","title":"MalPurifier: Enhancing Android Malware Detection with Adversarial Purification against Evasion Attacks","version":3},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-05-24T05:33:50.159191Z"},"links":{"citing_paper":"/paper/2312.06423"},"observation_digest":"sha256:7d1cdaa70f08e658ad94c7fdc6b69218a38b46eaff704060ddb0e867553d086d","observation_id":"2479102b-16ff-4b4d-9ffc-36e92be087ea","resolution":{"observed_at":"2026-05-24T05:33:56.995292Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"{Explanation- Guided} backdoor poisoning attacks against malware classifiers","venue":null,"work_id":"8d1add22-9037-43ed-90cc-dfcf5250b842","year":2021},"citing_paper":{"arxiv_id":"2312.06423","last_updated":"2026-05-06T06:52:07Z","snapshot_observed_at":"2026-07-06T16:59:48.092719Z","submitted_at":"2023-12-11T14:48:43Z","title":"MalPurifier: Enhancing Android Malware Detection with Adversarial Purification against Evasion Attacks","version":3},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-05-24T05:33:50.159191Z"},"links":{"citing_paper":"/paper/2312.06423"},"observation_digest":"sha256:2a93f58038991e6b4404e06d91420054d4dd3a4def1a798357d49db4abe5feb2","observation_id":"14b6ebe8-a957-442d-ada2-df406f104a67","resolution":{"observed_at":"2026-05-24T05:33:57.147142Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"When does machine learning {FAIL}? generalized transferability for evasion and poisoning attacks","venue":null,"work_id":"bd513bc3-3c4b-4340-8639-1219632b750f","year":2018},"citing_paper":{"arxiv_id":"2312.06423","last_updated":"2026-05-06T06:52:07Z","snapshot_observed_at":"2026-07-06T16:59:48.092719Z","submitted_at":"2023-12-11T14:48:43Z","title":"MalPurifier: Enhancing Android Malware Detection with Adversarial Purification against Evasion Attacks","version":3},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-05-24T05:33:50.159191Z"},"links":{"citing_paper":"/paper/2312.06423"},"observation_digest":"sha256:ea7338f063c3c814b87d7d1051d95bebef743ede1fef2431d011bb26ab25fd61","observation_id":"d91559c5-506d-4765-a9ef-afc900fdabd6","resolution":{"observed_at":"2026-05-24T05:33:57.058919Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Why do adversarial attacks transfer? explaining transferability of evasion and poisoning attacks","venue":null,"work_id":"09071fb7-2666-46f1-87d6-91c38d02d453","year":2019},"citing_paper":{"arxiv_id":"2312.06423","last_updated":"2026-05-06T06:52:07Z","snapshot_observed_at":"2026-07-06T16:59:48.092719Z","submitted_at":"2023-12-11T14:48:43Z","title":"MalPurifier: Enhancing Android Malware Detection with Adversarial Purification against Evasion Attacks","version":3},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-05-24T05:33:50.159191Z"},"links":{"citing_paper":"/paper/2312.06423"},"observation_digest":"sha256:6c73b5cf5f5e9abf2099decf3fd1d87711ac2d88d8925102fde20babd381f21a","observation_id":"a150027e-47a6-4663-8bc3-2c8c9162b2d5","resolution":{"observed_at":"2026-05-24T05:33:56.979233Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"A framework for enhancing deep neural networks against adversarial malware","venue":null,"work_id":"fbbdd6b5-468a-458a-91aa-4a27184dd91c","year":2021},"citing_paper":{"arxiv_id":"2312.06423","last_updated":"2026-05-06T06:52:07Z","snapshot_observed_at":"2026-07-06T16:59:48.092719Z","submitted_at":"2023-12-11T14:48:43Z","title":"MalPurifier: Enhancing Android Malware Detection with Adversarial Purification against Evasion Attacks","version":3},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-05-24T05:33:50.159191Z"},"links":{"citing_paper":"/paper/2312.06423"},"observation_digest":"sha256:8fcf597d5fb14e5a364234a9780b34f10e6f2a260d5e41bdb134d12457ee4589","observation_id":"695ae454-13e8-4aec-b744-cdff63feb82d","resolution":{"observed_at":"2026-05-24T05:33:57.118156Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Adversarial elf malware detection method using model interpre- tation","venue":null,"work_id":"2ad22a08-9159-48d4-aadd-ae891975ba0b","year":2023},"citing_paper":{"arxiv_id":"2312.06423","last_updated":"2026-05-06T06:52:07Z","snapshot_observed_at":"2026-07-06T16:59:48.092719Z","submitted_at":"2023-12-11T14:48:43Z","title":"MalPurifier: Enhancing Android Malware Detection with Adversarial Purification against Evasion Attacks","version":3},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-05-24T05:33:50.159191Z"},"links":{"citing_paper":"/paper/2312.06423"},"observation_digest":"sha256:f4ac3bc48888fc8ac5bf4e0cb4c21165ccdff13956926c5ba747d3d7ad06b16a","observation_id":"cff505c3-f692-45aa-bcc3-10b3c33c3472","resolution":{"observed_at":"2026-05-24T05:33:57.175655Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Pad: Towards principled adversarial malware detection against evasion attacks","venue":null,"work_id":"48ec3290-e8c2-42d9-b508-fba167751157","year":2023},"citing_paper":{"arxiv_id":"2312.06423","last_updated":"2026-05-06T06:52:07Z","snapshot_observed_at":"2026-07-06T16:59:48.092719Z","submitted_at":"2023-12-11T14:48:43Z","title":"MalPurifier: Enhancing Android Malware Detection with Adversarial Purification against Evasion Attacks","version":3},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-05-24T05:33:50.159191Z"},"links":{"citing_paper":"/paper/2312.06423"},"observation_digest":"sha256:daf5d3e2ec5d7c5006ff9ff9c19ffc4ad24a729019286417cce3336733f652ac","observation_id":"17556a92-3393-4157-9f6c-103bf0e371dc","resolution":{"observed_at":"2026-05-24T05:33:56.999301Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Boosting fast ad- versarial training with learnable adversarial initialization","venue":null,"work_id":"12f8b5d2-b40a-41f3-9f7f-5f7c4f3af4dd","year":2022},"citing_paper":{"arxiv_id":"2312.06423","last_updated":"2026-05-06T06:52:07Z","snapshot_observed_at":"2026-07-06T16:59:48.092719Z","submitted_at":"2023-12-11T14:48:43Z","title":"MalPurifier: Enhancing Android Malware Detection with Adversarial Purification against Evasion Attacks","version":3},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-05-24T05:33:50.159191Z"},"links":{"citing_paper":"/paper/2312.06423"},"observation_digest":"sha256:699d36775849991d09c4b317301c7535ffd79a8d02fe78d3018a11d3c9cb73e5","observation_id":"8530ce66-a946-4cfc-bfc8-17a5d5a6bcd3","resolution":{"observed_at":"2026-05-24T05:33:57.143330Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Interpolated joint space adversarial training for robust and generalizable defenses","venue":null,"work_id":"ba5deac1-6720-4031-bdd1-fec61b7f4478","year":2023},"citing_paper":{"arxiv_id":"2312.06423","last_updated":"2026-05-06T06:52:07Z","snapshot_observed_at":"2026-07-06T16:59:48.092719Z","submitted_at":"2023-12-11T14:48:43Z","title":"MalPurifier: Enhancing Android Malware Detection with Adversarial Purification against Evasion Attacks","version":3},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-05-24T05:33:50.159191Z"},"links":{"citing_paper":"/paper/2312.06423"},"observation_digest":"sha256:b11b62ab37bb700d2de63efee541bce5f1926eb7e7519613ce53492b13b94a1f","observation_id":"cdfc41b9-0016-480e-9b0a-852c6c976efa","resolution":{"observed_at":"2026-05-24T05:33:57.125798Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Robust android malware detection against adversarial example attacks","venue":null,"work_id":"f015ecc9-4f4c-4858-bf20-b43fb5c03fea","year":2021},"citing_paper":{"arxiv_id":"2312.06423","last_updated":"2026-05-06T06:52:07Z","snapshot_observed_at":"2026-07-06T16:59:48.092719Z","submitted_at":"2023-12-11T14:48:43Z","title":"MalPurifier: Enhancing Android Malware Detection with Adversarial Purification against Evasion Attacks","version":3},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-05-24T05:33:50.159191Z"},"links":{"citing_paper":"/paper/2312.06423"},"observation_digest":"sha256:f7517b59a0a148df16ddc94a72444aeac6f6b19afba1743e351d999d6b356592","observation_id":"257c2973-7f7e-4680-a6a2-e5ca492f223b","resolution":{"observed_at":"2026-05-24T05:33:57.062380Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"A self- supervised approach for adversarial robustness","venue":null,"work_id":"3361f009-aa8f-49aa-b220-8a0767206fa7","year":2020},"citing_paper":{"arxiv_id":"2312.06423","last_updated":"2026-05-06T06:52:07Z","snapshot_observed_at":"2026-07-06T16:59:48.092719Z","submitted_at":"2023-12-11T14:48:43Z","title":"MalPurifier: Enhancing Android Malware Detection with Adversarial Purification against Evasion Attacks","version":3},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-05-24T05:33:50.159191Z"},"links":{"citing_paper":"/paper/2312.06423"},"observation_digest":"sha256:395cc4340b9c60c36fc2352994debacb09ed4f5a30b804e64d02d5a7897b88fd","observation_id":"ad7af6db-8d7e-4b75-8bdd-ee921f46579b","resolution":{"observed_at":"2026-05-24T05:33:57.108717Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Adversarial purification with score-based generative models","venue":null,"work_id":"77e1d029-28da-4ae3-959e-a7c1e2600d17","year":2021},"citing_paper":{"arxiv_id":"2312.06423","last_updated":"2026-05-06T06:52:07Z","snapshot_observed_at":"2026-07-06T16:59:48.092719Z","submitted_at":"2023-12-11T14:48:43Z","title":"MalPurifier: Enhancing Android Malware Detection with Adversarial Purification against Evasion Attacks","version":3},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-05-24T05:33:50.159191Z"},"links":{"citing_paper":"/paper/2312.06423"},"observation_digest":"sha256:70ae1839a271f590b539a68c47cb030735dcaa482e2c54f52eabfed422dba70d","observation_id":"7958870b-698d-4c6c-afa8-5563118d0be4","resolution":{"observed_at":"2026-05-24T05:33:57.019616Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Evaluating the adversarial robustness of adaptive test- time defenses","venue":null,"work_id":"c02304d0-f7c1-4e5a-b80d-370612ea031b","year":2022},"citing_paper":{"arxiv_id":"2312.06423","last_updated":"2026-05-06T06:52:07Z","snapshot_observed_at":"2026-07-06T16:59:48.092719Z","submitted_at":"2023-12-11T14:48:43Z","title":"MalPurifier: Enhancing Android Malware Detection with Adversarial Purification against Evasion Attacks","version":3},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-05-24T05:33:50.159191Z"},"links":{"citing_paper":"/paper/2312.06423"},"observation_digest":"sha256:94408ee7abc4330a78138dc76a4c7b788f7952acc181ba9c8c3f26eb0ddb8c1f","observation_id":"0d8472f8-4223-4f9e-a0c7-37a57360ccdb","resolution":{"observed_at":"2026-05-24T05:33:57.055136Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Privacy preserving defense for black box classifiers against on-line adversarial attacks","venue":null,"work_id":"42dfdc5b-1aaf-408c-b461-61e12f3d15f4","year":2022},"citing_paper":{"arxiv_id":"2312.06423","last_updated":"2026-05-06T06:52:07Z","snapshot_observed_at":"2026-07-06T16:59:48.092719Z","submitted_at":"2023-12-11T14:48:43Z","title":"MalPurifier: Enhancing Android Malware Detection with Adversarial Purification against Evasion Attacks","version":3},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-05-24T05:33:50.159191Z"},"links":{"citing_paper":"/paper/2312.06423"},"observation_digest":"sha256:3c3b0780735efadfb850e92955291854debd5d4abbfacd4261a7dfb11f8dda16","observation_id":"10b70eda-51bb-4953-a40c-07d7f3084222","resolution":{"observed_at":"2026-05-24T05:33:57.162014Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Diffusion models for adversarial purification","venue":null,"work_id":"0f01bbc0-2aec-461f-8940-23ff079ddf4b","year":2022},"citing_paper":{"arxiv_id":"2312.06423","last_updated":"2026-05-06T06:52:07Z","snapshot_observed_at":"2026-07-06T16:59:48.092719Z","submitted_at":"2023-12-11T14:48:43Z","title":"MalPurifier: Enhancing Android Malware Detection with Adversarial Purification against Evasion Attacks","version":3},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-05-24T05:33:50.159191Z"},"links":{"citing_paper":"/paper/2312.06423"},"observation_digest":"sha256:a55052c787ae2bf3af23568e75ea427b04fa969810c5ce04f94dca1cc5ffbde8","observation_id":"84843d2b-8b85-4ad5-9d2c-65ead62a4044","resolution":{"observed_at":"2026-05-24T05:33:57.003659Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Ofei: A semi-black-box android adversarial sample attack framework against dlaas","venue":null,"work_id":"9ce6f4ff-a42a-4cf3-a506-b8c53901b6ee","year":2023},"citing_paper":{"arxiv_id":"2312.06423","last_updated":"2026-05-06T06:52:07Z","snapshot_observed_at":"2026-07-06T16:59:48.092719Z","submitted_at":"2023-12-11T14:48:43Z","title":"MalPurifier: Enhancing Android Malware Detection with Adversarial Purification against Evasion Attacks","version":3},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-05-24T05:33:50.159191Z"},"links":{"citing_paper":"/paper/2312.06423"},"observation_digest":"sha256:d55109efe8232992b1b786f474cfa7587acfe999aadf0e0db870cc56e913390f","observation_id":"b38f3d38-0393-4657-85a9-9c4da6e0c3a2","resolution":{"observed_at":"2026-05-24T05:33:57.104940Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Drebin: Effective and explainable detection of android malware in your pocket","venue":null,"work_id":"d5580c66-faa7-4f10-82b5-360c7d3c1102","year":2014},"citing_paper":{"arxiv_id":"2312.06423","last_updated":"2026-05-06T06:52:07Z","snapshot_observed_at":"2026-07-06T16:59:48.092719Z","submitted_at":"2023-12-11T14:48:43Z","title":"MalPurifier: Enhancing Android Malware Detection with Adversarial Purification against Evasion Attacks","version":3},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-05-24T05:33:50.159191Z"},"links":{"citing_paper":"/paper/2312.06423"},"observation_digest":"sha256:9f5597fccfbb01ec2dcacabb2516a157e92f8250cfb6ad6b540caced0c1d9a39","observation_id":"9a544fef-3853-4870-b00e-647ab6f28c5a","resolution":{"observed_at":"2026-05-24T05:33:57.015809Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Androzoo: Collecting millions of android apps for the research community","venue":null,"work_id":"682da6f7-562c-4ae5-ae59-b6664c85df6a","year":2016},"citing_paper":{"arxiv_id":"2312.06423","last_updated":"2026-05-06T06:52:07Z","snapshot_observed_at":"2026-07-06T16:59:48.092719Z","submitted_at":"2023-12-11T14:48:43Z","title":"MalPurifier: Enhancing Android Malware Detection with Adversarial Purification against Evasion Attacks","version":3},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-05-24T05:33:50.159191Z"},"links":{"citing_paper":"/paper/2312.06423"},"observation_digest":"sha256:22547581668e78508962d5426242bd856b2a8069fe3e74a15afcc1184a6e365b","observation_id":"14340e20-70b3-477d-b326-f3a175d7f2fc","resolution":{"observed_at":"2026-05-24T05:33:57.086894Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Practical evasion of a learning-based classifier: A case study","venue":null,"work_id":"ab3fa1ad-2ede-41b2-a019-dae2221222cd","year":2014},"citing_paper":{"arxiv_id":"2312.06423","last_updated":"2026-05-06T06:52:07Z","snapshot_observed_at":"2026-07-06T16:59:48.092719Z","submitted_at":"2023-12-11T14:48:43Z","title":"MalPurifier: Enhancing Android Malware Detection with Adversarial Purification against Evasion Attacks","version":3},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-05-24T05:33:50.159191Z"},"links":{"citing_paper":"/paper/2312.06423"},"observation_digest":"sha256:cee25fa7dcf12d5180c8db1a9e5d55f52623293145889e549514379cdb8388d6","observation_id":"e2639fd2-d7a6-4d79-ad24-812de135c9e5","resolution":{"observed_at":"2026-05-24T05:33:57.038874Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Avpass: Leaking and bypassing antivirus detection model automatically","venue":null,"work_id":"fc2218cd-bb43-464c-bfce-c61bef17d00d","year":2017},"citing_paper":{"arxiv_id":"2312.06423","last_updated":"2026-05-06T06:52:07Z","snapshot_observed_at":"2026-07-06T16:59:48.092719Z","submitted_at":"2023-12-11T14:48:43Z","title":"MalPurifier: Enhancing Android Malware Detection with Adversarial Purification against Evasion Attacks","version":3},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-05-24T05:33:50.159191Z"},"links":{"citing_paper":"/paper/2312.06423"},"observation_digest":"sha256:552d95adddec7281be783485de39c1b52cd75585edfd455049255eb50a7e8696","observation_id":"52b32d74-7610-40d3-92d8-b0b0b729827e","resolution":{"observed_at":"2026-05-24T05:33:57.094600Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Towards deep learning models resistant to adversarial attacks","venue":null,"work_id":"b63a1eb3-33a9-49a4-aa35-258bb2e331c5","year":2018},"citing_paper":{"arxiv_id":"2312.06423","last_updated":"2026-05-06T06:52:07Z","snapshot_observed_at":"2026-07-06T16:59:48.092719Z","submitted_at":"2023-12-11T14:48:43Z","title":"MalPurifier: Enhancing Android Malware Detection with Adversarial Purification against Evasion Attacks","version":3},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-05-24T05:33:50.159191Z"},"links":{"citing_paper":"/paper/2312.06423"},"observation_digest":"sha256:a285c40cedbcf104c4eb516d43460c2152b30fdcb9109f5e79dc5fbb00c1bcba","observation_id":"cf57e97a-7313-48a6-9304-5568fcbe430a","resolution":{"observed_at":"2026-05-24T05:33:57.066597Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Interpreting adversarially trained convo- lutional neural networks","venue":null,"work_id":"f7ec4aa9-6493-4b10-8842-4d2e3b02276a","year":2019},"citing_paper":{"arxiv_id":"2312.06423","last_updated":"2026-05-06T06:52:07Z","snapshot_observed_at":"2026-07-06T16:59:48.092719Z","submitted_at":"2023-12-11T14:48:43Z","title":"MalPurifier: Enhancing Android Malware Detection with Adversarial Purification against Evasion Attacks","version":3},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-05-24T05:33:50.159191Z"},"links":{"citing_paper":"/paper/2312.06423"},"observation_digest":"sha256:ab72ccc1779324ad2f3f1d787f45596fe08f89233c52689cc4e56dc07856bb77","observation_id":"5fb53b19-0108-4129-81d3-82765b1bb972","resolution":{"observed_at":"2026-05-24T05:33:57.154706Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Ad- versarial deep learning for robust detection of binary encoded malware","venue":null,"work_id":"1a5fef30-4a72-4813-9326-a724d17b934b","year":2018},"citing_paper":{"arxiv_id":"2312.06423","last_updated":"2026-05-06T06:52:07Z","snapshot_observed_at":"2026-07-06T16:59:48.092719Z","submitted_at":"2023-12-11T14:48:43Z","title":"MalPurifier: Enhancing Android Malware Detection with Adversarial Purification against Evasion Attacks","version":3},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-05-24T05:33:50.159191Z"},"links":{"citing_paper":"/paper/2312.06423"},"observation_digest":"sha256:313c606f341d143564d52c0b1ef79c248d342614b8f729619e552d87581a48d6","observation_id":"bf26d63e-94bf-403a-aa10-6d4e98b75083","resolution":{"observed_at":"2026-05-24T05:33:57.090839Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Generating adversarial malware examples for black-box attacks based on gan","venue":null,"work_id":"efc666c3-eec9-44ed-8c37-db1a5d7a535f","year":2022},"citing_paper":{"arxiv_id":"2312.06423","last_updated":"2026-05-06T06:52:07Z","snapshot_observed_at":"2026-07-06T16:59:48.092719Z","submitted_at":"2023-12-11T14:48:43Z","title":"MalPurifier: Enhancing Android Malware Detection with Adversarial Purification against Evasion Attacks","version":3},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-05-24T05:33:50.159191Z"},"links":{"citing_paper":"/paper/2312.06423"},"observation_digest":"sha256:3aff4e0892310a90c9891a4677e7dd1967d90b3d6c961860ea5c441fef9a4e77","observation_id":"bb61c1d7-8c1c-4a1d-b921-6eba97e6bd37","resolution":{"observed_at":"2026-05-24T05:33:57.113091Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Query efficient decision based sparse attacks against black-box deep learning models","venue":null,"work_id":"27fbd5f0-514a-4bd3-807b-6cf298834fc6","year":2021},"citing_paper":{"arxiv_id":"2312.06423","last_updated":"2026-05-06T06:52:07Z","snapshot_observed_at":"2026-07-06T16:59:48.092719Z","submitted_at":"2023-12-11T14:48:43Z","title":"MalPurifier: Enhancing Android Malware Detection with Adversarial Purification against Evasion Attacks","version":3},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-05-24T05:33:50.159191Z"},"links":{"citing_paper":"/paper/2312.06423"},"observation_digest":"sha256:3b1a2d8f1658acbfff5548076f005ecd04cf707ac0432e8a80f5bf936e7b7f8b","observation_id":"f9f67366-fd9a-4dfb-8645-1ba9da40fa2f","resolution":{"observed_at":"2026-05-24T05:33:57.047244Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Reliable evaluation of adversarial ro- bustness with an ensemble of diverse parameter-free attacks","venue":null,"work_id":"fbda569c-fd25-433d-8af5-5bb9bd4df5c6","year":2020},"citing_paper":{"arxiv_id":"2312.06423","last_updated":"2026-05-06T06:52:07Z","snapshot_observed_at":"2026-07-06T16:59:48.092719Z","submitted_at":"2023-12-11T14:48:43Z","title":"MalPurifier: Enhancing Android Malware Detection with Adversarial Purification against Evasion Attacks","version":3},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-05-24T05:33:50.159191Z"},"links":{"citing_paper":"/paper/2312.06423"},"observation_digest":"sha256:60f67c16c0e2d7928df0bbd5e3b18b3b7ca60989e54fe30b788d777661ba6562","observation_id":"f36f4b5a-1bc4-4bfd-b1cb-16d91e49c023","resolution":{"observed_at":"2026-05-24T05:33:57.011851Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"PBP: post- training backdoor purification for malware classifiers","venue":null,"work_id":"19800a1b-9ce6-4cd3-b7e2-ddf285b2cdb9","year":2025},"citing_paper":{"arxiv_id":"2312.06423","last_updated":"2026-05-06T06:52:07Z","snapshot_observed_at":"2026-07-06T16:59:48.092719Z","submitted_at":"2023-12-11T14:48:43Z","title":"MalPurifier: Enhancing Android Malware Detection with Adversarial Purification against Evasion Attacks","version":3},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-05-24T05:33:50.159191Z"},"links":{"citing_paper":"/paper/2312.06423"},"observation_digest":"sha256:c0c82e7777cef2b0ee4de22c7ebfe4454024895b39caf4b9d106c1e68ec92042","observation_id":"380470ed-5530-4435-a16e-b5b1799c4073","resolution":{"observed_at":"2026-05-24T05:33:57.080424Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"A multi- modal deep learning method for android malware detection using various features","venue":null,"work_id":"3f47b678-ebed-40b8-a795-c6ac32ae5964","year":2019},"citing_paper":{"arxiv_id":"2312.06423","last_updated":"2026-05-06T06:52:07Z","snapshot_observed_at":"2026-07-06T16:59:48.092719Z","submitted_at":"2023-12-11T14:48:43Z","title":"MalPurifier: Enhancing Android Malware Detection with Adversarial Purification against Evasion Attacks","version":3},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-05-24T05:33:50.159191Z"},"links":{"citing_paper":"/paper/2312.06423"},"observation_digest":"sha256:6f54285132d2a8cb0b19ed49a7f8a7393f0afff2deaac7e4add4d9944ef37aaf","observation_id":"07c6199a-e1ca-4ee4-ae5b-e0ed91e787b3","resolution":{"observed_at":"2026-05-24T05:33:56.983239Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Adversarial examples for malware detection","venue":null,"work_id":"06c394c2-27d0-4286-ae93-e196d11cd9e5","year":2017},"citing_paper":{"arxiv_id":"2312.06423","last_updated":"2026-05-06T06:52:07Z","snapshot_observed_at":"2026-07-06T16:59:48.092719Z","submitted_at":"2023-12-11T14:48:43Z","title":"MalPurifier: Enhancing Android Malware Detection with Adversarial Purification against Evasion Attacks","version":3},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-05-24T05:33:50.159191Z"},"links":{"citing_paper":"/paper/2312.06423"},"observation_digest":"sha256:9ac1f300db750d3335e20799dfed3143a503861c022bb3be210fa696cc7e9a42","observation_id":"89c88c05-39cc-455f-8935-923fd3efdd50","resolution":{"observed_at":"2026-05-24T05:33:56.991183Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1702.06280","last_updated":"2017-10-17T11:12:44Z","snapshot_observed_at":"2026-07-06T05:30:46.429084Z","submitted_at":"2017-02-21T07:03:11Z","title":"On the (Statistical) Detection of Adversarial Examples","version":2},"cited_work":{"arxiv_id":"1702.06280","doi":"10.48550/arxiv.1702.06280","metadata_source":"pith","pith_arxiv_id":"1702.06280","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"On the (Statistical) Detection of Adversarial Examples","venue":"cs.CR","work_id":"ad71759b-1d5a-48bd-b33f-e766c196278d","year":2017},"citing_paper":{"arxiv_id":"2312.06423","last_updated":"2026-05-06T06:52:07Z","snapshot_observed_at":"2026-07-06T16:59:48.092719Z","submitted_at":"2023-12-11T14:48:43Z","title":"MalPurifier: Enhancing Android Malware Detection with Adversarial Purification against Evasion Attacks","version":3},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-05-24T05:33:50.159191Z"},"links":{"cited_paper":"/paper/1702.06280","citing_paper":"/paper/2312.06423"},"observation_digest":"sha256:4e167c6f731d0232bb68e2928789340d60d9095be5d0ea2aa22362d8948bae07","observation_id":"7b0f2341-e925-43f5-8848-0acbb5f989db","resolution":{"observed_at":"2026-05-24T05:33:56.490247Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Towards robust detection of adversarial examples","venue":null,"work_id":"e613a96a-2f34-4dc2-a165-e9337a8d657c","year":2018},"citing_paper":{"arxiv_id":"2312.06423","last_updated":"2026-05-06T06:52:07Z","snapshot_observed_at":"2026-07-06T16:59:48.092719Z","submitted_at":"2023-12-11T14:48:43Z","title":"MalPurifier: Enhancing Android Malware Detection with Adversarial Purification against Evasion Attacks","version":3},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-05-24T05:33:50.159191Z"},"links":{"citing_paper":"/paper/2312.06423"},"observation_digest":"sha256:7c1315919d96386eb92576418fef06f0dfd0768667b40905eeb5ed2fdb21117d","observation_id":"0533b126-6805-4dd1-996b-c2360f56ee71","resolution":{"observed_at":"2026-05-24T05:33:56.936269Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Enhancing robustness of deep neural networks against adversarial malware samples: Principles, framework, and application to aics’2019 challenge","venue":null,"work_id":"7369de7a-75bf-479a-9613-78fa6239c7c7","year":2019},"citing_paper":{"arxiv_id":"2312.06423","last_updated":"2026-05-06T06:52:07Z","snapshot_observed_at":"2026-07-06T16:59:48.092719Z","submitted_at":"2023-12-11T14:48:43Z","title":"MalPurifier: Enhancing Android Malware Detection with Adversarial Purification against Evasion Attacks","version":3},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-05-24T05:33:50.159191Z"},"links":{"citing_paper":"/paper/2312.06423"},"observation_digest":"sha256:df9be512d488798abc0f13a013b10f73c93febd63ca97819663b41a1f28a78fa","observation_id":"e5d20283-d297-4201-b860-431fd165eff9","resolution":{"observed_at":"2026-05-24T05:33:56.929074Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Evading adversarial example detection defenses with orthogonal projected gradient descent","venue":null,"work_id":"521811c6-40b5-4d44-a62b-7c0d95bbee9d","year":2022},"citing_paper":{"arxiv_id":"2312.06423","last_updated":"2026-05-06T06:52:07Z","snapshot_observed_at":"2026-07-06T16:59:48.092719Z","submitted_at":"2023-12-11T14:48:43Z","title":"MalPurifier: Enhancing Android Malware Detection with Adversarial Purification against Evasion Attacks","version":3},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-05-24T05:33:50.159191Z"},"links":{"citing_paper":"/paper/2312.06423"},"observation_digest":"sha256:ae32c494217a3fc53fbaa62ce9c42318e077be17be5233700da39988c114c5cf","observation_id":"5d58374f-7722-4c13-b9ad-f0b1e51212e2","resolution":{"observed_at":"2026-05-24T05:33:57.136175Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Semantics-preserving node injection attacks against gnn-based acfg malware classifiers","venue":null,"work_id":"4f9b611d-ead9-42d5-9f8d-3aa8820e73f5","year":2025},"citing_paper":{"arxiv_id":"2312.06423","last_updated":"2026-05-06T06:52:07Z","snapshot_observed_at":"2026-07-06T16:59:48.092719Z","submitted_at":"2023-12-11T14:48:43Z","title":"MalPurifier: Enhancing Android Malware Detection with Adversarial Purification against Evasion Attacks","version":3},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-05-24T05:33:50.159191Z"},"links":{"citing_paper":"/paper/2312.06423"},"observation_digest":"sha256:c74eeb14bb9c6c67bf77522c3dddb8f4c8eab2681e7dafac5dc3a7f5f6e4198d","observation_id":"eedd7bc0-77ad-496a-a466-52c010c0d5b7","resolution":{"observed_at":"2026-05-24T05:33:57.042874Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Dl-fhmc: Deep learning- based fine-grained hierarchical learning approach for robust mal- ware classification","venue":null,"work_id":"1e68c7ee-ab4f-4f4d-afc6-65b3219debf4","year":2022},"citing_paper":{"arxiv_id":"2312.06423","last_updated":"2026-05-06T06:52:07Z","snapshot_observed_at":"2026-07-06T16:59:48.092719Z","submitted_at":"2023-12-11T14:48:43Z","title":"MalPurifier: Enhancing Android Malware Detection with Adversarial Purification against Evasion Attacks","version":3},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-05-24T05:33:50.159191Z"},"links":{"citing_paper":"/paper/2312.06423"},"observation_digest":"sha256:1d77cf30483b3f4b60c177a821b89c49648e03f9f8c8daa07755523fdb132200","observation_id":"d4a39e8e-7352-4a27-a107-8f054dde6aa6","resolution":{"observed_at":"2026-05-24T05:33:56.932615Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Mamadroid: Detecting android mal- ware by building markov chains of behavioral models (extended version)","venue":null,"work_id":"99759e52-baff-489e-8321-bf6a93ddb797","year":2019},"citing_paper":{"arxiv_id":"2312.06423","last_updated":"2026-05-06T06:52:07Z","snapshot_observed_at":"2026-07-06T16:59:48.092719Z","submitted_at":"2023-12-11T14:48:43Z","title":"MalPurifier: Enhancing Android Malware Detection with Adversarial Purification against Evasion Attacks","version":3},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-05-24T05:33:50.159191Z"},"links":{"citing_paper":"/paper/2312.06423"},"observation_digest":"sha256:1d981e952c560cf94710a1e2fe4b76ba8ddfc739f553cf58e683e1d621bef531","observation_id":"a31e1d9a-92c3-4981-a591-110e2e6439b5","resolution":{"observed_at":"2026-05-24T05:33:57.070400Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Efficient query-based attack against ml-based android malware detection under zero knowl- edge setting","venue":null,"work_id":"d6fbad72-dd7f-459b-be0e-71155625c180","year":2023},"citing_paper":{"arxiv_id":"2312.06423","last_updated":"2026-05-06T06:52:07Z","snapshot_observed_at":"2026-07-06T16:59:48.092719Z","submitted_at":"2023-12-11T14:48:43Z","title":"MalPurifier: Enhancing Android Malware Detection with Adversarial Purification against Evasion Attacks","version":3},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-05-24T05:33:50.159191Z"},"links":{"citing_paper":"/paper/2312.06423"},"observation_digest":"sha256:c860aaebb75c72256ed205fb3d86be4cc38d46d9fe77ae2d30237a7ea931fb13","observation_id":"a92a68a3-4e92-44e0-915f-6750972a9b4c","resolution":{"observed_at":"2026-05-24T05:33:57.074390Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Mab-malware: A reinforcement learning framework for blackbox generation of adversarial malware","venue":null,"work_id":"2384e996-f098-428f-9159-1ac1e29ae242","year":2022},"citing_paper":{"arxiv_id":"2312.06423","last_updated":"2026-05-06T06:52:07Z","snapshot_observed_at":"2026-07-06T16:59:48.092719Z","submitted_at":"2023-12-11T14:48:43Z","title":"MalPurifier: Enhancing Android Malware Detection with Adversarial Purification against Evasion Attacks","version":3},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-05-24T05:33:50.159191Z"},"links":{"citing_paper":"/paper/2312.06423"},"observation_digest":"sha256:8b5fce8f6a7b3719f48db0177d3836c03e9dc9de98b49128910b7569e6c2dd8d","observation_id":"b7c5543f-055c-4fd6-8961-c74022730798","resolution":{"observed_at":"2026-05-24T05:33:57.151112Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Evadedroid: A practical evasion attack on machine learning for black-box android malware detec- tion","venue":null,"work_id":"516adc84-e87e-48ca-bd17-4fe6daa1bde8","year":2024},"citing_paper":{"arxiv_id":"2312.06423","last_updated":"2026-05-06T06:52:07Z","snapshot_observed_at":"2026-07-06T16:59:48.092719Z","submitted_at":"2023-12-11T14:48:43Z","title":"MalPurifier: Enhancing Android Malware Detection with Adversarial Purification against Evasion Attacks","version":3},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-05-24T05:33:50.159191Z"},"links":{"citing_paper":"/paper/2312.06423"},"observation_digest":"sha256:1587718d8a259b82a555ab0325abc9e23419e2c77ba135b797f801fd7336e0d3","observation_id":"725f2eea-7e1a-49bf-bf02-256c27f2a8b8","resolution":{"observed_at":"2026-05-24T05:33:57.171789Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Structural attack against graph based android mal- ware detection","venue":null,"work_id":"30ad7178-d7cf-4562-8f26-7b603bac65b9","year":2021},"citing_paper":{"arxiv_id":"2312.06423","last_updated":"2026-05-06T06:52:07Z","snapshot_observed_at":"2026-07-06T16:59:48.092719Z","submitted_at":"2023-12-11T14:48:43Z","title":"MalPurifier: Enhancing Android Malware Detection with Adversarial Purification against Evasion Attacks","version":3},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-05-24T05:33:50.159191Z"},"links":{"citing_paper":"/paper/2312.06423"},"observation_digest":"sha256:7335edcbbef7bda6d088b4a3028eff52bb71a7f9eeeee860ae97645f611ac02d","observation_id":"db6f77e7-f652-4eba-8193-3aefd4e8e53b","resolution":{"observed_at":"2026-05-24T05:33:57.129441Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Dl-droid: Deep learning based android malware detection using real devices","venue":null,"work_id":"81e0e03e-0ac5-4f68-b960-557fbf606d3b","year":2020},"citing_paper":{"arxiv_id":"2312.06423","last_updated":"2026-05-06T06:52:07Z","snapshot_observed_at":"2026-07-06T16:59:48.092719Z","submitted_at":"2023-12-11T14:48:43Z","title":"MalPurifier: Enhancing Android Malware Detection with Adversarial Purification against Evasion Attacks","version":3},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-05-24T05:33:50.159191Z"},"links":{"citing_paper":"/paper/2312.06423"},"observation_digest":"sha256:733054e62b006ba02aefb02cfc190963b7686dbb718db9f5d11f7787483ddddb","observation_id":"b6d2db2e-8097-446c-a896-eb4e18e91967","resolution":{"observed_at":"2026-05-24T05:33:57.051306Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Familial clustering for weakly-labeled android malware using hybrid representation learning","venue":null,"work_id":"48fff31c-e4d5-496a-a263-165d22232fe3","year":2019},"citing_paper":{"arxiv_id":"2312.06423","last_updated":"2026-05-06T06:52:07Z","snapshot_observed_at":"2026-07-06T16:59:48.092719Z","submitted_at":"2023-12-11T14:48:43Z","title":"MalPurifier: Enhancing Android Malware Detection with Adversarial Purification against Evasion Attacks","version":3},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-05-24T05:33:50.159191Z"},"links":{"citing_paper":"/paper/2312.06423"},"observation_digest":"sha256:095910518eaf6ba11215ba8850ee7a71f91cce42af32499fd6c78fbc55b4f44e","observation_id":"8b2960f5-0c25-4a2c-adc1-f24b742dc683","resolution":{"observed_at":"2026-05-24T05:33:57.167651Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Boosting adversarial attacks with momentum","venue":null,"work_id":"83be7178-87ef-49b8-b8ba-dd8743e4fc7c","year":2018},"citing_paper":{"arxiv_id":"2312.06423","last_updated":"2026-05-06T06:52:07Z","snapshot_observed_at":"2026-07-06T16:59:48.092719Z","submitted_at":"2023-12-11T14:48:43Z","title":"MalPurifier: Enhancing Android Malware Detection with Adversarial Purification against Evasion Attacks","version":3},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-05-24T05:33:50.159191Z"},"links":{"citing_paper":"/paper/2312.06423"},"observation_digest":"sha256:53af280dde220ffc38e718faf8fb4fedf49c018b1567b4d33e8fd4b93e639aac","observation_id":"caef9022-c330-4c8d-823e-65c7eb0f1982","resolution":{"observed_at":"2026-05-24T05:33:57.023901Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Feature-space bayesian adversarial learning improved malware detector robustness","venue":null,"work_id":"2adb43dc-788e-42d9-ba7a-63d11b23930b","year":2016},"citing_paper":{"arxiv_id":"2312.06423","last_updated":"2026-05-06T06:52:07Z","snapshot_observed_at":"2026-07-06T16:59:48.092719Z","submitted_at":"2023-12-11T14:48:43Z","title":"MalPurifier: Enhancing Android Malware Detection with Adversarial Purification against Evasion Attacks","version":3},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-05-24T05:33:50.159191Z"},"links":{"citing_paper":"/paper/2312.06423"},"observation_digest":"sha256:b2b114cf2425bd64ba7062f99240cd2675d892da7ed77f2257e446960e47dbe2","observation_id":"f2c75dc3-954c-4e0a-8087-1e888ff833e7","resolution":{"observed_at":"2026-05-24T05:33:56.940025Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Malware analysis by combining multiple detectors and observation windows","venue":null,"work_id":"24e245e3-f2dc-4902-b970-5840fe2eeecb","year":2022},"citing_paper":{"arxiv_id":"2312.06423","last_updated":"2026-05-06T06:52:07Z","snapshot_observed_at":"2026-07-06T16:59:48.092719Z","submitted_at":"2023-12-11T14:48:43Z","title":"MalPurifier: Enhancing Android Malware Detection with Adversarial Purification against Evasion Attacks","version":3},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-05-24T05:33:50.159191Z"},"links":{"citing_paper":"/paper/2312.06423"},"observation_digest":"sha256:b683f8e2771059303d773e53ad4eb888db0eb7d9bfed92042ceb85e68d905237","observation_id":"443cf7ae-dddf-4144-8d95-7acf940e028c","resolution":{"observed_at":"2026-05-24T05:33:57.158438Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"His major research interests include moving target defense, Android malware detection, and reverse engineering","venue":null,"work_id":"abac4ac3-26ce-4588-8c3a-45f304693f6b","year":2004},"citing_paper":{"arxiv_id":"2312.06423","last_updated":"2026-05-06T06:52:07Z","snapshot_observed_at":"2026-07-06T16:59:48.092719Z","submitted_at":"2023-12-11T14:48:43Z","title":"MalPurifier: Enhancing Android Malware Detection with Adversarial Purification against Evasion Attacks","version":3},"reference_index":58,"source":"pdf_text","source_observed_at":"2026-05-24T05:33:50.159191Z"},"links":{"citing_paper":"/paper/2312.06423"},"observation_digest":"sha256:9ad461c8675d6006c715d4cdbd5919e03b6c658c653310cb2fd846af1a211a5b","observation_id":"cf33eb13-97de-4c27-976b-f50adb384948","resolution":{"observed_at":"2026-05-24T05:33:56.972732Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2312.06423","last_updated":"2026-05-06T06:52:07Z","latest_version":3,"primary_category":"cs.CR","snapshot_observed_at":"2026-07-06T16:59:48.092719Z","submitted_at":"2023-12-11T14:48:43Z","title":"MalPurifier: Enhancing Android Malware Detection with Adversarial Purification against Evasion Attacks"},"reference_resolution":{"displayed":58,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":0,"verified_exact":1,"verified_fuzzy":57},"total_outbound_references":58},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"thesis":"As of 7 August 2026, this Paper Citation Record lists 58 of 58 outbound references and 0 inbound Pith citation observations for arXiv:2312.06423."}