{"as_of":"2026-08-17T20:40:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:1fa6598220b9ac94966643cb605e182c2a13021b3a39ec2b816e769e10a4b255","coverage":[{"denominator":45,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":45,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-12T13:31:45.955708Z","state":"measured"},{"denominator":45,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":45,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-17T06:30:58.91139+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2411.16167/citation-record","integrity":"/paper/2411.16167/integrity","json":"/paper/2411.16167/citation-record.json","paper":"/paper/2411.16167"},"outbound":[{"citation":{"cited_paper":{"arxiv_id":"2304.10638","last_updated":"2023-04-20T20:32:40Z","snapshot_observed_at":"2026-08-16T15:38:51.676268Z","submitted_at":"2023-04-20T20:32:40Z","title":"Get Rid Of Your Trail: Remotely Erasing Backdoors in Federated Learning","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2304.10638","snapshot_observed_at":"2026-08-12T13:31:45.746608Z","title":"Get rid of your trail: Remotely erasing backdoors in federated learning","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2411.16167","last_updated":"2025-07-08T08:14:22Z","snapshot_observed_at":"2026-08-16T16:39:48.619980Z","submitted_at":"2024-11-25T07:46:57Z","title":"Mind the Cost of Scaffold! Benign Clients May Even Become Accomplices of Backdoor Attack","version":3},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-12T13:31:45.746608Z"},"links":{"cited_paper":"/paper/2304.10638","citing_paper":"/paper/2411.16167"},"observation_digest":"sha256:7aec9947b88c80c7d50c4c7633fbb9c3c08757e786e295c5ac40802cbe72c68c","observation_id":"eb804f20-23e8-4bad-8abd-5d926c4c3619","resolution":{"observed_at":"2026-08-12T13:31:45.746608Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T13:31:46.662434Z","title":"Per- door: Persistent backdoors in federated learning using ad- versarial perturbations","venue":null,"work_id":"051d398f-7547-4bc2-8355-d303f0263591","year":2023},"citing_paper":{"arxiv_id":"2411.16167","last_updated":"2025-07-08T08:14:22Z","snapshot_observed_at":"2026-08-16T16:39:48.619980Z","submitted_at":"2024-11-25T07:46:57Z","title":"Mind the Cost of Scaffold! Benign Clients May Even Become Accomplices of Backdoor Attack","version":3},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-12T13:31:45.752239Z"},"links":{"citing_paper":"/paper/2411.16167"},"observation_digest":"sha256:44d78d470c0382a88466c30602a5c12a048e6cbd7c52ffcb84f56c3b21142d13","observation_id":"985f600e-66af-4faa-b714-4ec3735a1980","resolution":{"observed_at":"2026-08-12T13:31:46.667373Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T13:31:46.646413Z","title":"How to backdoor federated learning","venue":null,"work_id":"dfcef996-0ec8-44e5-97a3-8b26c5bd12ca","year":2020},"citing_paper":{"arxiv_id":"2411.16167","last_updated":"2025-07-08T08:14:22Z","snapshot_observed_at":"2026-08-16T16:39:48.619980Z","submitted_at":"2024-11-25T07:46:57Z","title":"Mind the Cost of Scaffold! Benign Clients May Even Become Accomplices of Backdoor Attack","version":3},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-12T13:31:45.757019Z"},"links":{"citing_paper":"/paper/2411.16167"},"observation_digest":"sha256:ae2dc7eb7639697a196ad384c7994a4f8acedcce908de2f5eb516ad955691756","observation_id":"9d6ae9e4-5803-410f-845f-826726d3faec","resolution":{"observed_at":"2026-08-12T13:31:46.651919Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T13:31:46.630595Z","title":"Analyzing federated learning through an adversarial lens","venue":null,"work_id":"6f8e4aea-d610-49b1-bef4-c0b5eb24d7a4","year":2019},"citing_paper":{"arxiv_id":"2411.16167","last_updated":"2025-07-08T08:14:22Z","snapshot_observed_at":"2026-08-16T16:39:48.619980Z","submitted_at":"2024-11-25T07:46:57Z","title":"Mind the Cost of Scaffold! Benign Clients May Even Become Accomplices of Backdoor Attack","version":3},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-12T13:31:45.761653Z"},"links":{"citing_paper":"/paper/2411.16167"},"observation_digest":"sha256:aca801ae9404df4dbdd377d41fde115d5315f71e879e6bdc56404090749fd635","observation_id":"b3a1e9cf-22e7-49d7-b5c2-bc3f03e82d4e","resolution":{"observed_at":"2026-08-12T13:31:46.635563Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T13:31:46.614584Z","title":"Machine learning with adversaries: Byzantine tolerant gradient descent","venue":null,"work_id":"9fb54ddf-248d-4780-8cbe-8bd156e18e5a","year":2017},"citing_paper":{"arxiv_id":"2411.16167","last_updated":"2025-07-08T08:14:22Z","snapshot_observed_at":"2026-08-16T16:39:48.619980Z","submitted_at":"2024-11-25T07:46:57Z","title":"Mind the Cost of Scaffold! Benign Clients May Even Become Accomplices of Backdoor Attack","version":3},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-12T13:31:45.766677Z"},"links":{"citing_paper":"/paper/2411.16167"},"observation_digest":"sha256:85167412bc084d467abf56cf354c44c5d1ce3d8f10bcaf30dd0190e06539faa3","observation_id":"fb8983e7-60b6-4269-a718-ee9d4d753190","resolution":{"observed_at":"2026-08-12T13:31:46.619245Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1712.05526","last_updated":"2017-12-15T04:26:26Z","snapshot_observed_at":"2026-07-06T06:14:30.795326Z","submitted_at":"2017-12-15T04:26:26Z","title":"Targeted Backdoor Attacks on Deep Learning Systems Using Data Poisoning","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1712.05526","snapshot_observed_at":"2026-08-12T13:31:45.771285Z","title":"Targeted backdoor attacks on deep learning systems using data poisoning","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2411.16167","last_updated":"2025-07-08T08:14:22Z","snapshot_observed_at":"2026-08-16T16:39:48.619980Z","submitted_at":"2024-11-25T07:46:57Z","title":"Mind the Cost of Scaffold! Benign Clients May Even Become Accomplices of Backdoor Attack","version":3},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-12T13:31:45.771285Z"},"links":{"cited_paper":"/paper/1712.05526","citing_paper":"/paper/2411.16167"},"observation_digest":"sha256:3402339a1825e082e34d4379a43fd4a69f4a5437eb4eeda47eed3cea1b65f5e3","observation_id":"becd019f-9fab-4c7e-8023-6d5889e198b4","resolution":{"observed_at":"2026-08-12T13:31:45.771285Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T13:31:46.599795Z","title":"Chameleon: Adapting to peer im- ages for planting durable backdoors in federated learning","venue":null,"work_id":"b24f4468-4729-4755-8544-49e8e680624d","year":2023},"citing_paper":{"arxiv_id":"2411.16167","last_updated":"2025-07-08T08:14:22Z","snapshot_observed_at":"2026-08-16T16:39:48.619980Z","submitted_at":"2024-11-25T07:46:57Z","title":"Mind the Cost of Scaffold! Benign Clients May Even Become Accomplices of Backdoor Attack","version":3},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-12T13:31:45.776392Z"},"links":{"citing_paper":"/paper/2411.16167"},"observation_digest":"sha256:442d575cf0510a6ffe9b32aed30c7e189ddabf15f58064b95ac535f270ffe6a3","observation_id":"fb82b772-8ed3-49d1-92ec-dad9752a3f2a","resolution":{"observed_at":"2026-08-12T13:31:46.604409Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T13:31:46.584584Z","title":"The mnist database of handwritten digit images for machine learning research [best of the web]","venue":null,"work_id":"636dc083-9825-4b79-b8db-f1abfd97b1b3","year":2012},"citing_paper":{"arxiv_id":"2411.16167","last_updated":"2025-07-08T08:14:22Z","snapshot_observed_at":"2026-08-16T16:39:48.619980Z","submitted_at":"2024-11-25T07:46:57Z","title":"Mind the Cost of Scaffold! Benign Clients May Even Become Accomplices of Backdoor Attack","version":3},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-12T13:31:45.782567Z"},"links":{"citing_paper":"/paper/2411.16167"},"observation_digest":"sha256:e6dfbe59a57cda5277a053e3854a63200530c6ebdf871bf0781388f6966f3ea2","observation_id":"38f75755-1065-4b73-adc3-eddcf00e933b","resolution":{"observed_at":"2026-08-12T13:31:46.589710Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T13:31:46.569609Z","title":"On the vulnerability of backdoor defenses for federated learning","venue":null,"work_id":"5b0eaf86-f9da-4efa-be0c-5335880cf560","year":null},"citing_paper":{"arxiv_id":"2411.16167","last_updated":"2025-07-08T08:14:22Z","snapshot_observed_at":"2026-08-16T16:39:48.619980Z","submitted_at":"2024-11-25T07:46:57Z","title":"Mind the Cost of Scaffold! Benign Clients May Even Become Accomplices of Backdoor Attack","version":3},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-12T13:31:45.787191Z"},"links":{"citing_paper":"/paper/2411.16167"},"observation_digest":"sha256:a36979cd59a5dd4c5f42b34979107e6f07fb430d5af272eb8742a86812f877c5","observation_id":"66e55b62-37e8-46fd-96cd-ffd829edb182","resolution":{"observed_at":"2026-08-12T13:31:46.574264Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2108.04551","last_updated":"2022-12-01T08:22:00Z","snapshot_observed_at":"2026-08-16T18:04:09.875821Z","submitted_at":"2021-08-10T09:54:25Z","title":"ABC-FL: Anomalous and Benign client Classification in Federated Learning","version":4},"cited_work":{"arxiv_id":"2108.04551","doi":null,"metadata_source":"pith","pith_arxiv_id":"2108.04551","snapshot_observed_at":"2026-08-12T13:31:46.087510Z","title":"ABC-FL: Anomalous and Benign client Classification in Federated Learning","venue":"cs.LG","work_id":"c25d7649-5c26-4d75-b523-93fbd5a00b7d","year":2021},"citing_paper":{"arxiv_id":"2411.16167","last_updated":"2025-07-08T08:14:22Z","snapshot_observed_at":"2026-08-16T16:39:48.619980Z","submitted_at":"2024-11-25T07:46:57Z","title":"Mind the Cost of Scaffold! Benign Clients May Even Become Accomplices of Backdoor Attack","version":3},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-12T13:31:45.791895Z"},"links":{"cited_paper":"/paper/2108.04551","citing_paper":"/paper/2411.16167"},"observation_digest":"sha256:d8923fdeb26fb22d18fc8021fb65989fe24b99c535a06cee8d9a5535fe6f896b","observation_id":"14e2158b-a9a6-4798-8b0f-7a32b14d17c6","resolution":{"observed_at":"2026-08-12T13:31:46.092498Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T13:31:46.554667Z","title":"Advances and open problems in federated learn- ing","venue":null,"work_id":"881b7eed-a368-49b4-ba2f-8ae119edda1b","year":2021},"citing_paper":{"arxiv_id":"2411.16167","last_updated":"2025-07-08T08:14:22Z","snapshot_observed_at":"2026-08-16T16:39:48.619980Z","submitted_at":"2024-11-25T07:46:57Z","title":"Mind the Cost of Scaffold! Benign Clients May Even Become Accomplices of Backdoor Attack","version":3},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-12T13:31:45.796611Z"},"links":{"citing_paper":"/paper/2411.16167"},"observation_digest":"sha256:f1c47d35a510d36bb9dd6d7c7b0d8c716ba0e08f72cba43995d49571b9175e69","observation_id":"10dd4251-dcd0-47d3-b84c-b6dcded43a1b","resolution":{"observed_at":"2026-08-12T13:31:46.560007Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T13:31:45.801133Z","title":"Scaffold: Stochastic controlled averaging for feder- ated learning","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2411.16167","last_updated":"2025-07-08T08:14:22Z","snapshot_observed_at":"2026-08-16T16:39:48.619980Z","submitted_at":"2024-11-25T07:46:57Z","title":"Mind the Cost of Scaffold! Benign Clients May Even Become Accomplices of Backdoor Attack","version":3},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-12T13:31:45.801133Z"},"links":{"citing_paper":"/paper/2411.16167"},"observation_digest":"sha256:d9dd36ba9bd525149e0bca70c84e1596d4353a6d4c3a375c2e5720a0cf0fd5fb","observation_id":"78746bf8-0e8c-43d2-b91a-820c6fe5d445","resolution":{"observed_at":"2026-08-12T13:31:45.801133Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T13:31:46.530995Z","title":"Overcoming catastrophic forgetting in neu- ral networks","venue":null,"work_id":"56b4bbf0-78ff-4dc7-8178-330d2dccb903","year":2017},"citing_paper":{"arxiv_id":"2411.16167","last_updated":"2025-07-08T08:14:22Z","snapshot_observed_at":"2026-08-16T16:39:48.619980Z","submitted_at":"2024-11-25T07:46:57Z","title":"Mind the Cost of Scaffold! Benign Clients May Even Become Accomplices of Backdoor Attack","version":3},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-12T13:31:45.806074Z"},"links":{"citing_paper":"/paper/2411.16167"},"observation_digest":"sha256:e9a032032c527398bc203bf83c97d1234bc6537423ed6efbfe5ca18250a50e05","observation_id":"01c236fd-012c-4dae-94ce-cddac2a2b089","resolution":{"observed_at":"2026-08-12T13:31:46.535699Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T13:31:45.810833Z","title":"Learning multiple layers of features from tiny images","venue":null,"work_id":null,"year":2009},"citing_paper":{"arxiv_id":"2411.16167","last_updated":"2025-07-08T08:14:22Z","snapshot_observed_at":"2026-08-16T16:39:48.619980Z","submitted_at":"2024-11-25T07:46:57Z","title":"Mind the Cost of Scaffold! Benign Clients May Even Become Accomplices of Backdoor Attack","version":3},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-12T13:31:45.810833Z"},"links":{"citing_paper":"/paper/2411.16167"},"observation_digest":"sha256:a20f53f228468b18f44ca65a72cee500e3e625c32ecaf8299f64bd1446c7a47c","observation_id":"47ea9a7b-f031-45f9-afec-49d4d951f9ab","resolution":{"observed_at":"2026-08-12T13:31:45.810833Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T13:31:46.506110Z","title":"Gan-based information leakage attack de- tection in federated learning","venue":null,"work_id":"7653b734-811b-46eb-a745-fc7eb8c934fb","year":2022},"citing_paper":{"arxiv_id":"2411.16167","last_updated":"2025-07-08T08:14:22Z","snapshot_observed_at":"2026-08-16T16:39:48.619980Z","submitted_at":"2024-11-25T07:46:57Z","title":"Mind the Cost of Scaffold! Benign Clients May Even Become Accomplices of Backdoor Attack","version":3},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-12T13:31:45.815482Z"},"links":{"citing_paper":"/paper/2411.16167"},"observation_digest":"sha256:9a8d31816ac54fdd3be419a93bfb1174233bd74a3635863e338f6b851985bce0","observation_id":"df49b22b-8a37-45e9-810e-85a9f3de1a3b","resolution":{"observed_at":"2026-08-12T13:31:46.510727Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T13:31:46.491317Z","title":"Preservation of the global knowledge by not- true distillation in federated learning","venue":null,"work_id":"f818482c-7119-4c66-865e-d7cd593d1e20","year":2022},"citing_paper":{"arxiv_id":"2411.16167","last_updated":"2025-07-08T08:14:22Z","snapshot_observed_at":"2026-08-16T16:39:48.619980Z","submitted_at":"2024-11-25T07:46:57Z","title":"Mind the Cost of Scaffold! Benign Clients May Even Become Accomplices of Backdoor Attack","version":3},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-12T13:31:45.820081Z"},"links":{"citing_paper":"/paper/2411.16167"},"observation_digest":"sha256:f918ceebe8a6782027b3c1390f3ce7bd9f3b28b8bbba4cbfcc050e42d728f776","observation_id":"a9ea68e7-95ef-45d8-94eb-601d5301554d","resolution":{"observed_at":"2026-08-12T13:31:46.496183Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T13:31:46.475919Z","title":"Detection and mitigation of label-flipping at- tacks in federated learning systems with kpca and k-means","venue":null,"work_id":"401546d7-c186-4f6a-85c8-a397fb6ab95a","year":2021},"citing_paper":{"arxiv_id":"2411.16167","last_updated":"2025-07-08T08:14:22Z","snapshot_observed_at":"2026-08-16T16:39:48.619980Z","submitted_at":"2024-11-25T07:46:57Z","title":"Mind the Cost of Scaffold! Benign Clients May Even Become Accomplices of Backdoor Attack","version":3},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-12T13:31:45.824540Z"},"links":{"citing_paper":"/paper/2411.16167"},"observation_digest":"sha256:a08ec2db5c0eea3ba953965a401a86436eb8488db72ccf65687af4b810b652eb","observation_id":"30ab3e69-7b73-42f6-95a5-129a80221486","resolution":{"observed_at":"2026-08-12T13:31:46.481025Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T13:31:46.459185Z","title":"3dfed: Adaptive and extensi- ble framework for covert backdoor attack in federated learn- ing","venue":null,"work_id":"26262fcc-471c-4e27-b4c7-b3cae36529f1","year":2023},"citing_paper":{"arxiv_id":"2411.16167","last_updated":"2025-07-08T08:14:22Z","snapshot_observed_at":"2026-08-16T16:39:48.619980Z","submitted_at":"2024-11-25T07:46:57Z","title":"Mind the Cost of Scaffold! Benign Clients May Even Become Accomplices of Backdoor Attack","version":3},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-12T13:31:45.829252Z"},"links":{"citing_paper":"/paper/2411.16167"},"observation_digest":"sha256:a0dfd206e83b48cbc8c52f7ce8c8401d376e95c075bd99126edbb8f6e532c28f","observation_id":"50d0b741-1351-4af5-8ae9-bfdb1843ff89","resolution":{"observed_at":"2026-08-12T13:31:46.464081Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T13:31:46.443944Z","title":"Model- contrastive federated learning","venue":null,"work_id":"4d58865f-e48e-4e03-ad10-44a118a3e493","year":2021},"citing_paper":{"arxiv_id":"2411.16167","last_updated":"2025-07-08T08:14:22Z","snapshot_observed_at":"2026-08-16T16:39:48.619980Z","submitted_at":"2024-11-25T07:46:57Z","title":"Mind the Cost of Scaffold! Benign Clients May Even Become Accomplices of Backdoor Attack","version":3},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-12T13:31:45.833846Z"},"links":{"citing_paper":"/paper/2411.16167"},"observation_digest":"sha256:42bf464740ec45e92b43a1527e9b6d8cfb8e0967479bc6aca6daf0145bac402a","observation_id":"8f3109fb-5eea-4afc-87a8-018641a33c88","resolution":{"observed_at":"2026-08-12T13:31:46.449192Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T13:31:46.428267Z","title":"A survey on federated learning systems: Vision, hype and reality for data privacy and protection","venue":null,"work_id":"f755f94f-d2e0-4e6a-bd4d-e66c7f7e30b1","year":2021},"citing_paper":{"arxiv_id":"2411.16167","last_updated":"2025-07-08T08:14:22Z","snapshot_observed_at":"2026-08-16T16:39:48.619980Z","submitted_at":"2024-11-25T07:46:57Z","title":"Mind the Cost of Scaffold! Benign Clients May Even Become Accomplices of Backdoor Attack","version":3},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-12T13:31:45.838667Z"},"links":{"citing_paper":"/paper/2411.16167"},"observation_digest":"sha256:e7ddd696d3c6191e410c3e34a46fd96c4322d850ae4ffe1794db554b2ca34087","observation_id":"c205c556-4c2c-480c-9427-9b2a3e798c3c","resolution":{"observed_at":"2026-08-12T13:31:46.433324Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T13:31:46.413329Z","title":"Federated optimiza- tion in heterogeneous networks","venue":null,"work_id":"1b193653-6415-49e0-8567-d7a7644a98a7","year":2020},"citing_paper":{"arxiv_id":"2411.16167","last_updated":"2025-07-08T08:14:22Z","snapshot_observed_at":"2026-08-16T16:39:48.619980Z","submitted_at":"2024-11-25T07:46:57Z","title":"Mind the Cost of Scaffold! Benign Clients May Even Become Accomplices of Backdoor Attack","version":3},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-12T13:31:45.843275Z"},"links":{"citing_paper":"/paper/2411.16167"},"observation_digest":"sha256:f3210f73b4332d29f3a380173fad22eae04112f897682611d95853ca5e010533","observation_id":"43b1e68b-0f97-4fc6-bcf0-3b510f5b5a8f","resolution":{"observed_at":"2026-08-12T13:31:46.418179Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1907.02189","last_updated":"2020-06-25T06:45:52Z","snapshot_observed_at":"2026-08-14T16:08:56.121684Z","submitted_at":"2019-07-04T02:04:56Z","title":"On the Convergence of FedAvg on Non-IID Data","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1907.02189","snapshot_observed_at":"2026-08-12T13:31:45.847536Z","title":"On the convergence of fedavg on non-iid data","venue":null,"work_id":null,"year":1907},"citing_paper":{"arxiv_id":"2411.16167","last_updated":"2025-07-08T08:14:22Z","snapshot_observed_at":"2026-08-16T16:39:48.619980Z","submitted_at":"2024-11-25T07:46:57Z","title":"Mind the Cost of Scaffold! Benign Clients May Even Become Accomplices of Backdoor Attack","version":3},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-12T13:31:45.847536Z"},"links":{"cited_paper":"/paper/1907.02189","citing_paper":"/paper/2411.16167"},"observation_digest":"sha256:b55059d410eb3751650a2d71985c4948e3b392e1d5c6ab1586ce6cfc3fdc9989","observation_id":"ebd3e337-6a0b-4fc1-be53-c78f5cb51021","resolution":{"observed_at":"2026-08-12T13:31:45.847536Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T13:31:46.396883Z","title":"Back- door learning: A survey","venue":null,"work_id":"f3690317-03e7-4a36-a46f-3070e1f298ea","year":2022},"citing_paper":{"arxiv_id":"2411.16167","last_updated":"2025-07-08T08:14:22Z","snapshot_observed_at":"2026-08-16T16:39:48.619980Z","submitted_at":"2024-11-25T07:46:57Z","title":"Mind the Cost of Scaffold! Benign Clients May Even Become Accomplices of Backdoor Attack","version":3},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-12T13:31:45.852501Z"},"links":{"citing_paper":"/paper/2411.16167"},"observation_digest":"sha256:82daa6da798a6fe3d1469e4eace3f4e9707c75d99b1baa622070bf11a725c9f3","observation_id":"fb0dde28-13e9-4c64-893e-2887f92bb8aa","resolution":{"observed_at":"2026-08-12T13:31:46.401933Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T13:31:45.857376Z","title":"Fine- pruning: Defending against backdooring attacks on deep neural networks","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2411.16167","last_updated":"2025-07-08T08:14:22Z","snapshot_observed_at":"2026-08-16T16:39:48.619980Z","submitted_at":"2024-11-25T07:46:57Z","title":"Mind the Cost of Scaffold! Benign Clients May Even Become Accomplices of Backdoor Attack","version":3},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-12T13:31:45.857376Z"},"links":{"citing_paper":"/paper/2411.16167"},"observation_digest":"sha256:59ed1c255bdf125662bf4bc5761d26b82f12d20f385960cb3895a66255a65704","observation_id":"a910f62a-fa47-41d4-93fc-8f224ee05c66","resolution":{"observed_at":"2026-08-12T13:31:45.857376Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T13:31:46.372497Z","title":"Poisoning with cer- berus: Stealthy and colluded backdoor attack against fed- erated learning","venue":null,"work_id":"fa070da3-6408-4e2e-8312-b7efc4553635","year":2023},"citing_paper":{"arxiv_id":"2411.16167","last_updated":"2025-07-08T08:14:22Z","snapshot_observed_at":"2026-08-16T16:39:48.619980Z","submitted_at":"2024-11-25T07:46:57Z","title":"Mind the Cost of Scaffold! Benign Clients May Even Become Accomplices of Backdoor Attack","version":3},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-12T13:31:45.862264Z"},"links":{"citing_paper":"/paper/2411.16167"},"observation_digest":"sha256:832db38d98cf2f3a531d15f1b6693d24969d0cf7dbf7f604ecb40c8dccc990bc","observation_id":"1fa0c8e7-cfaf-4116-89a1-262811dcb8b6","resolution":{"observed_at":"2026-08-12T13:31:46.377236Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T13:31:46.357553Z","title":"Poisoning attacks against feature-based image classification","venue":null,"work_id":"9f36b810-5e39-4365-a69f-52a73e8aa6f2","year":2022},"citing_paper":{"arxiv_id":"2411.16167","last_updated":"2025-07-08T08:14:22Z","snapshot_observed_at":"2026-08-16T16:39:48.619980Z","submitted_at":"2024-11-25T07:46:57Z","title":"Mind the Cost of Scaffold! Benign Clients May Even Become Accomplices of Backdoor Attack","version":3},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-12T13:31:45.866715Z"},"links":{"citing_paper":"/paper/2411.16167"},"observation_digest":"sha256:c9e9c20b9e215d4dd8cfe43c2eb87d05de00c2100bb275cbc86a026bcebceb7f","observation_id":"952cfcb5-695d-4ea3-aa74-94a3990d1cee","resolution":{"observed_at":"2026-08-12T13:31:46.362424Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T13:31:46.342600Z","title":"Communication- efficient learning of deep networks from decentralized data","venue":null,"work_id":"de11504d-8305-4569-80a7-6cb8fcf0a44d","year":2017},"citing_paper":{"arxiv_id":"2411.16167","last_updated":"2025-07-08T08:14:22Z","snapshot_observed_at":"2026-08-16T16:39:48.619980Z","submitted_at":"2024-11-25T07:46:57Z","title":"Mind the Cost of Scaffold! Benign Clients May Even Become Accomplices of Backdoor Attack","version":3},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-12T13:31:45.871126Z"},"links":{"citing_paper":"/paper/2411.16167"},"observation_digest":"sha256:5df956bfbcf14916d568237c4842ce663183cdef6d90590b495685fbe23df7da","observation_id":"4a32a7b8-9111-4113-93c8-415f333ef349","resolution":{"observed_at":"2026-08-12T13:31:46.347942Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T13:31:46.327577Z","title":"Local learning matters: Rethinking data heterogeneity in federated learning","venue":null,"work_id":"73002f5c-979a-4b2e-8756-0a9fc9eec7be","year":2022},"citing_paper":{"arxiv_id":"2411.16167","last_updated":"2025-07-08T08:14:22Z","snapshot_observed_at":"2026-08-16T16:39:48.619980Z","submitted_at":"2024-11-25T07:46:57Z","title":"Mind the Cost of Scaffold! Benign Clients May Even Become Accomplices of Backdoor Attack","version":3},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-12T13:31:45.875696Z"},"links":{"citing_paper":"/paper/2411.16167"},"observation_digest":"sha256:ea92625d1ea9d52025d9f3ffab376e6ed8c4bdfcea975f5928856a33a0e6035a","observation_id":"1eb461b8-2753-4817-85be-06ce8bf3da14","resolution":{"observed_at":"2026-08-12T13:31:46.332727Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2304.08847","last_updated":"2023-08-23T21:57:10Z","snapshot_observed_at":"2026-08-17T19:10:31.877455Z","submitted_at":"2023-04-18T09:22:32Z","title":"BadVFL: Backdoor Attacks in Vertical Federated Learning","version":2},"cited_work":{"arxiv_id":"2304.08847","doi":null,"metadata_source":"pith","pith_arxiv_id":"2304.08847","snapshot_observed_at":"2026-08-12T13:31:46.050043Z","title":"BadVFL: Backdoor Attacks in Vertical Federated Learning","venue":"cs.LG","work_id":"1b9359a1-ff1a-4427-b179-b22d09f81b3f","year":2023},"citing_paper":{"arxiv_id":"2411.16167","last_updated":"2025-07-08T08:14:22Z","snapshot_observed_at":"2026-08-16T16:39:48.619980Z","submitted_at":"2024-11-25T07:46:57Z","title":"Mind the Cost of Scaffold! Benign Clients May Even Become Accomplices of Backdoor Attack","version":3},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-12T13:31:45.880468Z"},"links":{"cited_paper":"/paper/2304.08847","citing_paper":"/paper/2411.16167"},"observation_digest":"sha256:04da41121cb4cca49623be8b44ce3a4ffd7931900536494316b1e283b07f86c0","observation_id":"2b787e1e-d581-4ef2-b5fa-76f564f8c127","resolution":{"observed_at":"2026-08-12T13:31:46.055322Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T13:31:46.312496Z","title":"{FLAME}: Taming backdoors in federated learning","venue":null,"work_id":"8ae980c1-ec69-4717-9c0d-96def8c8df02","year":2022},"citing_paper":{"arxiv_id":"2411.16167","last_updated":"2025-07-08T08:14:22Z","snapshot_observed_at":"2026-08-16T16:39:48.619980Z","submitted_at":"2024-11-25T07:46:57Z","title":"Mind the Cost of Scaffold! Benign Clients May Even Become Accomplices of Backdoor Attack","version":3},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-12T13:31:45.885234Z"},"links":{"citing_paper":"/paper/2411.16167"},"observation_digest":"sha256:4d26054663cb888e85a3b448607ce6e34e55a562d22dd29c90a70cba7686cbbd","observation_id":"7afe86c8-a71a-4166-a24d-254acd075db3","resolution":{"observed_at":"2026-08-12T13:31:46.317261Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T13:31:46.296060Z","title":"Iba: Towards irreversible back- door attacks in federated learning","venue":null,"work_id":"c5c88758-5b9f-4706-b8cd-c9d0829df411","year":2023},"citing_paper":{"arxiv_id":"2411.16167","last_updated":"2025-07-08T08:14:22Z","snapshot_observed_at":"2026-08-16T16:39:48.619980Z","submitted_at":"2024-11-25T07:46:57Z","title":"Mind the Cost of Scaffold! Benign Clients May Even Become Accomplices of Backdoor Attack","version":3},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-12T13:31:45.889525Z"},"links":{"citing_paper":"/paper/2411.16167"},"observation_digest":"sha256:b0cef00f5a9c9653fb191d34a6c2016842e62f81b545077f417f2a60511f76cc","observation_id":"c2f04cb7-f13d-4b01-baa2-a26ff497008d","resolution":{"observed_at":"2026-08-12T13:31:46.301674Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T13:31:46.280487Z","title":"Sparsefed: Mit- igating model poisoning attacks in federated learning with sparsification","venue":null,"work_id":"307b345d-9cd6-46fc-8ed9-47903a7858fd","year":2022},"citing_paper":{"arxiv_id":"2411.16167","last_updated":"2025-07-08T08:14:22Z","snapshot_observed_at":"2026-08-16T16:39:48.619980Z","submitted_at":"2024-11-25T07:46:57Z","title":"Mind the Cost of Scaffold! Benign Clients May Even Become Accomplices of Backdoor Attack","version":3},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-12T13:31:45.894055Z"},"links":{"citing_paper":"/paper/2411.16167"},"observation_digest":"sha256:247f56195178c550461861a284daa1b796f5310ba972f459541c16e362b53b45","observation_id":"49fa6a18-c1ad-4eb2-8c9f-be82c8d09831","resolution":{"observed_at":"2026-08-12T13:31:46.285540Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T13:31:46.265347Z","title":"Gan-driven data poisoning attacks and their mitigation in federated learning systems","venue":null,"work_id":"7fb7be14-d776-4fbb-a060-af1838ac462c","year":2023},"citing_paper":{"arxiv_id":"2411.16167","last_updated":"2025-07-08T08:14:22Z","snapshot_observed_at":"2026-08-16T16:39:48.619980Z","submitted_at":"2024-11-25T07:46:57Z","title":"Mind the Cost of Scaffold! Benign Clients May Even Become Accomplices of Backdoor Attack","version":3},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-12T13:31:45.898702Z"},"links":{"citing_paper":"/paper/2411.16167"},"observation_digest":"sha256:8c6a1cf30f3148003a429aec7ab6325b2a911a8b98cd3c5f8718615238f2d721","observation_id":"9e264368-f066-4dba-896f-24cf400f1c53","resolution":{"observed_at":"2026-08-12T13:31:46.270182Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1911.07963","last_updated":"2019-12-02T19:00:11Z","snapshot_observed_at":"2026-08-17T17:57:37.740446Z","submitted_at":"2019-11-18T21:25:03Z","title":"Can You Really Backdoor Federated Learning?","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1911.07963","snapshot_observed_at":"2026-08-12T13:31:45.902931Z","title":"Can you really backdoor federated learning? arXiv preprint arXiv:1911.07963, 2019","venue":null,"work_id":null,"year":1911},"citing_paper":{"arxiv_id":"2411.16167","last_updated":"2025-07-08T08:14:22Z","snapshot_observed_at":"2026-08-16T16:39:48.619980Z","submitted_at":"2024-11-25T07:46:57Z","title":"Mind the Cost of Scaffold! Benign Clients May Even Become Accomplices of Backdoor Attack","version":3},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-12T13:31:45.902931Z"},"links":{"cited_paper":"/paper/1911.07963","citing_paper":"/paper/2411.16167"},"observation_digest":"sha256:72b0af432af711897dbe5a456331dbff248528de9a6c2c5544acd5d77ef869b9","observation_id":"d56f7abd-a29c-4798-b192-708830a36676","resolution":{"observed_at":"2026-08-12T13:31:45.902931Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T13:31:46.250657Z","title":"Mitigating poisoning attack in federated learning","venue":null,"work_id":"aa3b1942-0353-4b5a-a9b2-5a2732084c2a","year":null},"citing_paper":{"arxiv_id":"2411.16167","last_updated":"2025-07-08T08:14:22Z","snapshot_observed_at":"2026-08-16T16:39:48.619980Z","submitted_at":"2024-11-25T07:46:57Z","title":"Mind the Cost of Scaffold! Benign Clients May Even Become Accomplices of Backdoor Attack","version":3},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-12T13:31:45.907504Z"},"links":{"citing_paper":"/paper/2411.16167"},"observation_digest":"sha256:b859de470fcc4897ab23cd0fa03d0f2c10db42295151110846d69ce392dd2c7f","observation_id":"3d52f7da-e78b-45b8-b603-4a22ee90d4f4","resolution":{"observed_at":"2026-08-12T13:31:46.255347Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T13:31:46.235217Z","title":"Attack of the tails: Yes, you really can backdoor federated learning","venue":null,"work_id":"92379396-d084-4af7-983f-c9d5fd3a8ac5","year":null},"citing_paper":{"arxiv_id":"2411.16167","last_updated":"2025-07-08T08:14:22Z","snapshot_observed_at":"2026-08-16T16:39:48.619980Z","submitted_at":"2024-11-25T07:46:57Z","title":"Mind the Cost of Scaffold! Benign Clients May Even Become Accomplices of Backdoor Attack","version":3},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-12T13:31:45.912090Z"},"links":{"citing_paper":"/paper/2411.16167"},"observation_digest":"sha256:c6ce8dc99282504cc888184ff1f2d3d7050ad059e811f1559f59f01b86458491","observation_id":"0bd07fe2-9ac5-487c-bc82-c3db81643347","resolution":{"observed_at":"2026-08-12T13:31:46.239892Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2002.06440","last_updated":"2020-02-15T20:09:24Z","snapshot_observed_at":"2026-08-17T19:05:41.296068Z","submitted_at":"2020-02-15T20:09:24Z","title":"Federated Learning with Matched Averaging","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2002.06440","snapshot_observed_at":"2026-08-12T13:31:45.916945Z","title":"Federated learning with matched averaging","venue":null,"work_id":null,"year":2002},"citing_paper":{"arxiv_id":"2411.16167","last_updated":"2025-07-08T08:14:22Z","snapshot_observed_at":"2026-08-16T16:39:48.619980Z","submitted_at":"2024-11-25T07:46:57Z","title":"Mind the Cost of Scaffold! Benign Clients May Even Become Accomplices of Backdoor Attack","version":3},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-12T13:31:45.916945Z"},"links":{"cited_paper":"/paper/2002.06440","citing_paper":"/paper/2411.16167"},"observation_digest":"sha256:51b158b6eb4174038b930697e848d07b51e9fb80c01db0e73514911de9a39bff","observation_id":"98d1288c-9fb6-4a55-b80a-f178c5ffd034","resolution":{"observed_at":"2026-08-12T13:31:45.916945Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T13:31:45.921808Z","title":"Tackling the objective inconsistency prob- lem in heterogeneous federated optimization","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2411.16167","last_updated":"2025-07-08T08:14:22Z","snapshot_observed_at":"2026-08-16T16:39:48.619980Z","submitted_at":"2024-11-25T07:46:57Z","title":"Mind the Cost of Scaffold! Benign Clients May Even Become Accomplices of Backdoor Attack","version":3},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-12T13:31:45.921808Z"},"links":{"citing_paper":"/paper/2411.16167"},"observation_digest":"sha256:89a049309540f4a2e1ce32a6104b8700ccd146975d317e0e00dce96a9edac5a6","observation_id":"7748d333-c3c6-46cd-a67e-0308f338cbf9","resolution":{"observed_at":"2026-08-12T13:31:45.921808Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2210.09305","last_updated":"2022-10-17T17:59:38Z","snapshot_observed_at":"2026-08-16T16:23:27.367115Z","submitted_at":"2022-10-17T17:59:38Z","title":"Thinking Two Moves Ahead: Anticipating Other Users Improves Backdoor Attacks in Federated Learning","version":1},"cited_work":{"arxiv_id":"2210.09305","doi":null,"metadata_source":"pith","pith_arxiv_id":"2210.09305","snapshot_observed_at":"2026-08-12T13:31:45.992619Z","title":"Thinking Two Moves Ahead: Anticipating Other Users Improves Backdoor Attacks in Federated Learning","venue":"cs.LG","work_id":"0974912b-da0a-4cd3-9845-5637f8f4da6e","year":2022},"citing_paper":{"arxiv_id":"2411.16167","last_updated":"2025-07-08T08:14:22Z","snapshot_observed_at":"2026-08-16T16:39:48.619980Z","submitted_at":"2024-11-25T07:46:57Z","title":"Mind the Cost of Scaffold! Benign Clients May Even Become Accomplices of Backdoor Attack","version":3},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-12T13:31:45.926912Z"},"links":{"cited_paper":"/paper/2210.09305","citing_paper":"/paper/2411.16167"},"observation_digest":"sha256:edb976b1a18df9598ef8d03e55e38048374b395a34432155e2f6106178c3a555","observation_id":"149635fd-5eb9-4e43-b5fa-75884525e56b","resolution":{"observed_at":"2026-08-12T13:31:45.999866Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T13:31:46.209336Z","title":"Dba: Dis- tributed backdoor attacks against federated learning","venue":null,"work_id":"c0d5cb12-c93c-4d72-a3c2-26293534e06c","year":2019},"citing_paper":{"arxiv_id":"2411.16167","last_updated":"2025-07-08T08:14:22Z","snapshot_observed_at":"2026-08-16T16:39:48.619980Z","submitted_at":"2024-11-25T07:46:57Z","title":"Mind the Cost of Scaffold! Benign Clients May Even Become Accomplices of Backdoor Attack","version":3},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-12T13:31:45.931682Z"},"links":{"citing_paper":"/paper/2411.16167"},"observation_digest":"sha256:c7f5a4d24ba2cb77776a338f22a297aeb10011a7bc5d7140348c599683037a98","observation_id":"558e1389-6b86-4781-8348-23af8e8bb6dc","resolution":{"observed_at":"2026-08-12T13:31:46.214433Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T13:31:46.193765Z","title":"Crfl: Certifiably robust federated learning against backdoor at- tacks","venue":null,"work_id":"b2c303af-96d3-44e9-a3c4-5122fd1bd50d","year":2021},"citing_paper":{"arxiv_id":"2411.16167","last_updated":"2025-07-08T08:14:22Z","snapshot_observed_at":"2026-08-16T16:39:48.619980Z","submitted_at":"2024-11-25T07:46:57Z","title":"Mind the Cost of Scaffold! Benign Clients May Even Become Accomplices of Backdoor Attack","version":3},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-12T13:31:45.937564Z"},"links":{"citing_paper":"/paper/2411.16167"},"observation_digest":"sha256:c4d2f76b168411efddf107c4d2ce82de9a08b216a9494f09787353d5edc96895","observation_id":"581ca44d-196a-47db-a76c-e08712d3653e","resolution":{"observed_at":"2026-08-12T13:31:46.198368Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T13:31:46.179162Z","title":"Bapfl: You can backdoor personalized federated learn- ing","venue":null,"work_id":"0f6ab384-cebd-4ac6-a40f-8141d4f63fe7","year":null},"citing_paper":{"arxiv_id":"2411.16167","last_updated":"2025-07-08T08:14:22Z","snapshot_observed_at":"2026-08-16T16:39:48.619980Z","submitted_at":"2024-11-25T07:46:57Z","title":"Mind the Cost of Scaffold! Benign Clients May Even Become Accomplices of Backdoor Attack","version":3},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-12T13:31:45.942152Z"},"links":{"citing_paper":"/paper/2411.16167"},"observation_digest":"sha256:6d3fe28e7b2b333b349019f70e703c05c665e724bf020d32899f91aac0ceca17","observation_id":"f09dbcd8-b9d6-4975-bcc9-9390514fcfca","resolution":{"observed_at":"2026-08-12T13:31:46.183983Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T13:31:46.164102Z","title":"A3fl: Adversarially adaptive backdoor attacks to federated learning","venue":null,"work_id":"6e3c0bc5-55c7-41c5-8124-82699c3c3cdc","year":2023},"citing_paper":{"arxiv_id":"2411.16167","last_updated":"2025-07-08T08:14:22Z","snapshot_observed_at":"2026-08-16T16:39:48.619980Z","submitted_at":"2024-11-25T07:46:57Z","title":"Mind the Cost of Scaffold! Benign Clients May Even Become Accomplices of Backdoor Attack","version":3},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-12T13:31:45.946674Z"},"links":{"citing_paper":"/paper/2411.16167"},"observation_digest":"sha256:cf92bf04644a7b48a36107cca68292c82b02bb8baff7f480f2cb85f5b108aeba","observation_id":"8618aa8e-aa16-4633-9ddc-755cc4591072","resolution":{"observed_at":"2026-08-12T13:31:46.168754Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T13:31:46.149431Z","title":"Poisoning attack in federated learning using generative ad- versarial nets","venue":null,"work_id":"e65ee808-1a91-4ac8-b140-bb15682df9be","year":2019},"citing_paper":{"arxiv_id":"2411.16167","last_updated":"2025-07-08T08:14:22Z","snapshot_observed_at":"2026-08-16T16:39:48.619980Z","submitted_at":"2024-11-25T07:46:57Z","title":"Mind the Cost of Scaffold! Benign Clients May Even Become Accomplices of Backdoor Attack","version":3},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-12T13:31:45.950996Z"},"links":{"citing_paper":"/paper/2411.16167"},"observation_digest":"sha256:729c85613ba236c9d4f5091e290054c0ef71e8ef6fd11d3b53ffdc18624f650a","observation_id":"1232b8fb-b6b8-4747-9852-7bdbfd53ece9","resolution":{"observed_at":"2026-08-12T13:31:46.154251Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T13:31:46.134513Z","title":"Neurotoxin: Durable backdoors in federated learning","venue":null,"work_id":"91dff7a0-2bf8-4ce2-8a54-4b0570e64b15","year":2022},"citing_paper":{"arxiv_id":"2411.16167","last_updated":"2025-07-08T08:14:22Z","snapshot_observed_at":"2026-08-16T16:39:48.619980Z","submitted_at":"2024-11-25T07:46:57Z","title":"Mind the Cost of Scaffold! Benign Clients May Even Become Accomplices of Backdoor Attack","version":3},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-12T13:31:45.955708Z"},"links":{"citing_paper":"/paper/2411.16167"},"observation_digest":"sha256:a7accea226fb14bf53ed6de68ea40718de28d14084c5d97160826039dcb65a46","observation_id":"4263c06b-671a-40ce-8008-8bb07e940ecc","resolution":{"observed_at":"2026-08-12T13:31:46.139373Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2411.16167","last_updated":"2025-07-08T08:14:22Z","latest_version":3,"primary_category":"cs.LG","snapshot_observed_at":"2026-08-16T16:39:48.619980Z","submitted_at":"2024-11-25T07:46:57Z","title":"Mind the Cost of Scaffold! Benign Clients May Even Become Accomplices of Backdoor Attack"},"reference_resolution":{"displayed":45,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":9,"verified_exact":3,"verified_fuzzy":33},"total_outbound_references":45},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"thesis":"As of 17 August 2026, this Paper Citation Record lists 45 of 45 outbound references and 0 inbound Pith citation observations for arXiv:2411.16167."}