{"as_of":"2026-08-12T07:17:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:4756fc016b3f3832440cb7ad0daf4d6a3ebc37ac7bbeb3c114d7d3bb9495714a","coverage":[{"denominator":51,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":51,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-11T15:48:26.968010Z","state":"measured"},{"denominator":51,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":51,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-12T06:34:41.77262+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2412.10681/citation-record","integrity":"/paper/2412.10681/integrity","json":"/paper/2412.10681/citation-record.json","paper":"/paper/2412.10681"},"outbound":[{"citation":{"cited_paper":{"arxiv_id":"2106.03734","last_updated":"2021-09-20T11:48:45Z","snapshot_observed_at":"2026-08-08T07:39:46.839094Z","submitted_at":"2021-06-07T15:59:49Z","title":"Reveal of Vision Transformers Robustness against Adversarial Attacks","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2106.03734","snapshot_observed_at":"2026-08-11T15:48:25.514442Z","title":"Reveal of vision transformers robustness against ad- versarial attacks","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2412.10681","last_updated":"2024-12-19T10:59:24Z","snapshot_observed_at":"2026-08-11T19:01:33.594797Z","submitted_at":"2024-12-14T05:01:46Z","title":"One Pixel is All I Need","version":2},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-11T15:48:25.514442Z"},"links":{"cited_paper":"/paper/2106.03734","citing_paper":"/paper/2412.10681"},"observation_digest":"sha256:fbd4d2a52be03ab495430871d8a682358de3b4037fdb0f363d2d9089e37706a3","observation_id":"5d0321a6-ce42-4071-adae-e300e4b1d60c","resolution":{"observed_at":"2026-08-11T15:48:25.514442Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1409.0473","last_updated":"2016-05-19T21:53:22Z","snapshot_observed_at":"2026-07-06T03:53:10.336430Z","submitted_at":"2014-09-01T16:33:02Z","title":"Neural Machine Translation by Jointly Learning to Align and Translate","version":7},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1409.0473","snapshot_observed_at":"2026-08-11T15:48:25.526615Z","title":"Neural machine translation by jointly learning to align and translate","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2412.10681","last_updated":"2024-12-19T10:59:24Z","snapshot_observed_at":"2026-08-11T19:01:33.594797Z","submitted_at":"2024-12-14T05:01:46Z","title":"One Pixel is All I Need","version":2},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-11T15:48:25.526615Z"},"links":{"cited_paper":"/paper/1409.0473","citing_paper":"/paper/2412.10681"},"observation_digest":"sha256:fdc85c327f31f7f7f8430c174c7d898e01719988fd3ebc34593d85fb90e557a7","observation_id":"81154c4d-8952-4b78-b839-f71343c8d150","resolution":{"observed_at":"2026-08-11T15:48:25.526615Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2102.10496","last_updated":"2021-02-21T03:13:27Z","snapshot_observed_at":"2026-08-11T19:01:00.988584Z","submitted_at":"2021-02-21T03:13:27Z","title":"Targeted Attack against Deep Neural Networks via Flipping Limited Weight Bits","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2102.10496","snapshot_observed_at":"2026-08-11T15:48:25.588768Z","title":"Targeted attack against deep neural networks via flipping limited weight bits","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2412.10681","last_updated":"2024-12-19T10:59:24Z","snapshot_observed_at":"2026-08-11T19:01:33.594797Z","submitted_at":"2024-12-14T05:01:46Z","title":"One Pixel is All I Need","version":2},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-11T15:48:25.588768Z"},"links":{"cited_paper":"/paper/2102.10496","citing_paper":"/paper/2412.10681"},"observation_digest":"sha256:545323aae4ed377e2ad769084edb58207fb44ca6e6be43a66e79fcbd11630e6b","observation_id":"67394a5c-3480-452c-bbc3-2563b0ef857f","resolution":{"observed_at":"2026-08-11T15:48:25.588768Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2110.02797","last_updated":"2021-10-11T14:28:50Z","snapshot_observed_at":"2026-08-06T10:44:23.738492Z","submitted_at":"2021-10-06T14:18:47Z","title":"Adversarial Robustness Comparison of Vision Transformer and MLP-Mixer to CNNs","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2110.02797","snapshot_observed_at":"2026-08-11T15:48:25.761719Z","title":"Adversarial robustness comparison of vision transformer and mlp-mixer to cnns","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2412.10681","last_updated":"2024-12-19T10:59:24Z","snapshot_observed_at":"2026-08-11T19:01:33.594797Z","submitted_at":"2024-12-14T05:01:46Z","title":"One Pixel is All I Need","version":2},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-11T15:48:25.761719Z"},"links":{"cited_paper":"/paper/2110.02797","citing_paper":"/paper/2412.10681"},"observation_digest":"sha256:f7ec3b6efa7df5b0ccc3fa16d7984bc6df0b3e264cfcbf758b7ef56a9a4f72d1","observation_id":"9f45b025-262c-449e-b21d-7833cf09984c","resolution":{"observed_at":"2026-08-11T15:48:25.761719Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1712.05526","last_updated":"2017-12-15T04:26:26Z","snapshot_observed_at":"2026-07-06T06:14:30.795326Z","submitted_at":"2017-12-15T04:26:26Z","title":"Targeted Backdoor Attacks on Deep Learning Systems Using Data Poisoning","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1712.05526","snapshot_observed_at":"2026-08-11T15:48:25.766910Z","title":"Targeted backdoor attacks on deep learning systems 7 using data poisoning","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2412.10681","last_updated":"2024-12-19T10:59:24Z","snapshot_observed_at":"2026-08-11T19:01:33.594797Z","submitted_at":"2024-12-14T05:01:46Z","title":"One Pixel is All I Need","version":2},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-11T15:48:25.766910Z"},"links":{"cited_paper":"/paper/1712.05526","citing_paper":"/paper/2412.10681"},"observation_digest":"sha256:df27f89a965ec52ea76248fc9685a288fb205a7ae4b2cd92037b0d009a98c5e2","observation_id":"eb05d464-b579-4153-aea0-012caa22ed4f","resolution":{"observed_at":"2026-08-11T15:48:25.766910Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T15:48:28.925595Z","title":"Visformer: The vision-friendly transformer","venue":null,"work_id":"46b29cf3-c1f9-4b23-bee1-2d12dcfe41d2","year":2021},"citing_paper":{"arxiv_id":"2412.10681","last_updated":"2024-12-19T10:59:24Z","snapshot_observed_at":"2026-08-11T19:01:33.594797Z","submitted_at":"2024-12-14T05:01:46Z","title":"One Pixel is All I Need","version":2},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-11T15:48:25.771958Z"},"links":{"citing_paper":"/paper/2412.10681"},"observation_digest":"sha256:caa9fd2264073ad959ec2b34c3fdad48d8b6ee8de320da8fe1183b8bffcb3265","observation_id":"4e32a0a3-5f4d-4b0e-8c03-afd4bc16954e","resolution":{"observed_at":"2026-08-11T15:48:28.970450Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1810.04805","last_updated":"2019-05-24T20:37:26Z","snapshot_observed_at":"2026-07-30T09:12:38.100527Z","submitted_at":"2018-10-11T00:50:01Z","title":"BERT: Pre-training of Deep Bidirectional Transformers for Language Understanding","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1810.04805","snapshot_observed_at":"2026-08-11T15:48:25.776695Z","title":"Bert: Pre-training of deep bidirectional transformers for language understanding","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2412.10681","last_updated":"2024-12-19T10:59:24Z","snapshot_observed_at":"2026-08-11T19:01:33.594797Z","submitted_at":"2024-12-14T05:01:46Z","title":"One Pixel is All I Need","version":2},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-11T15:48:25.776695Z"},"links":{"cited_paper":"/paper/1810.04805","citing_paper":"/paper/2412.10681"},"observation_digest":"sha256:7c42c9cfa86ec1b3dfb65a2a7ccf373f8039cc3ff7f36b982c0a5c14872db675","observation_id":"010b5964-37bb-4bfb-9fbf-54eb2e34d638","resolution":{"observed_at":"2026-08-11T15:48:25.776695Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T15:48:28.760587Z","title":"Lira: Learnable, imperceptible and robust backdoor attacks","venue":null,"work_id":"d5dff7f4-384b-44e6-8b15-489959b3aed5","year":2021},"citing_paper":{"arxiv_id":"2412.10681","last_updated":"2024-12-19T10:59:24Z","snapshot_observed_at":"2026-08-11T19:01:33.594797Z","submitted_at":"2024-12-14T05:01:46Z","title":"One Pixel is All I Need","version":2},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-11T15:48:25.781926Z"},"links":{"citing_paper":"/paper/2412.10681"},"observation_digest":"sha256:1a1f956aae98ce411d7a7b4403816192018f7bf4fa651577c40d807730a0e848","observation_id":"75d1a22e-86ac-4b17-9afe-882d3c9a30b8","resolution":{"observed_at":"2026-08-11T15:48:28.835556Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2010.11929","last_updated":"2021-06-03T13:08:56Z","snapshot_observed_at":"2026-08-10T01:12:16.468283Z","submitted_at":"2020-10-22T17:55:59Z","title":"An Image is Worth 16x16 Words: Transformers for Image Recognition at Scale","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2010.11929","snapshot_observed_at":"2026-08-11T15:48:25.786779Z","title":"An image is worth 16x16 words: Transformers for image recognition at scale","venue":null,"work_id":null,"year":2010},"citing_paper":{"arxiv_id":"2412.10681","last_updated":"2024-12-19T10:59:24Z","snapshot_observed_at":"2026-08-11T19:01:33.594797Z","submitted_at":"2024-12-14T05:01:46Z","title":"One Pixel is All I Need","version":2},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-11T15:48:25.786779Z"},"links":{"cited_paper":"/paper/2010.11929","citing_paper":"/paper/2412.10681"},"observation_digest":"sha256:900c80fc7855ec91ccfea3177d859ce4d05a93b59730229357998a4bd7156a97","observation_id":"8d6d3815-6d9c-4e40-a588-3b2bfe6235b3","resolution":{"observed_at":"2026-08-11T15:48:25.786779Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T15:48:28.745180Z","title":"Fiba: Frequency-injection based backdoor attack in medical image analysis","venue":null,"work_id":"e9bb42be-cdde-40a4-a154-4b95822eb754","year":2022},"citing_paper":{"arxiv_id":"2412.10681","last_updated":"2024-12-19T10:59:24Z","snapshot_observed_at":"2026-08-11T19:01:33.594797Z","submitted_at":"2024-12-14T05:01:46Z","title":"One Pixel is All I Need","version":2},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-11T15:48:25.790830Z"},"links":{"citing_paper":"/paper/2412.10681"},"observation_digest":"sha256:bb0613b83c87e3143f817f9000ee46a3ff26f5690e47734ffc9258b9fdeea33a","observation_id":"216f1dfd-d13e-465d-8441-445f2b48e399","resolution":{"observed_at":"2026-08-11T15:48:28.750720Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2109.08868","last_updated":"2023-09-02T07:27:15Z","snapshot_observed_at":"2026-08-12T05:32:39.104120Z","submitted_at":"2021-09-18T07:56:59Z","title":"Backdoor Attack on Hash-based Image Retrieval via Clean-label Data Poisoning","version":3},"cited_work":{"arxiv_id":"2109.08868","doi":null,"metadata_source":"pith","pith_arxiv_id":"2109.08868","snapshot_observed_at":"2026-08-11T15:48:27.119359Z","title":"Backdoor Attack on Hash-based Image Retrieval via Clean-label Data Poisoning","venue":"cs.CV","work_id":"957d2581-f3c2-444e-a530-917638114b2b","year":2021},"citing_paper":{"arxiv_id":"2412.10681","last_updated":"2024-12-19T10:59:24Z","snapshot_observed_at":"2026-08-11T19:01:33.594797Z","submitted_at":"2024-12-14T05:01:46Z","title":"One Pixel is All I Need","version":2},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-11T15:48:25.795039Z"},"links":{"cited_paper":"/paper/2109.08868","citing_paper":"/paper/2412.10681"},"observation_digest":"sha256:374a84ee880ee6fcc5498c9bfec74f1a0b038fad401af78c2871cb74e38a4c5a","observation_id":"385097dd-a3c0-4e40-9915-db628c10c7d4","resolution":{"observed_at":"2026-08-11T15:48:27.162974Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1412.6572","last_updated":"2015-03-20T20:19:16Z","snapshot_observed_at":"2026-07-06T04:04:16.777653Z","submitted_at":"2014-12-20T01:17:12Z","title":"Explaining and Harnessing Adversarial Examples","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1412.6572","snapshot_observed_at":"2026-08-11T15:48:25.986513Z","title":"Explaining and harnessing adversarial examples","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2412.10681","last_updated":"2024-12-19T10:59:24Z","snapshot_observed_at":"2026-08-11T19:01:33.594797Z","submitted_at":"2024-12-14T05:01:46Z","title":"One Pixel is All I Need","version":2},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-11T15:48:25.986513Z"},"links":{"cited_paper":"/paper/1412.6572","citing_paper":"/paper/2412.10681"},"observation_digest":"sha256:8a9dc945017cd34d5f8fa14933c7eec3f8a89f96fd42c22acf5e5620f7251f27","observation_id":"87bba81c-ceac-4849-9180-ea042a3f4cc7","resolution":{"observed_at":"2026-08-11T15:48:25.986513Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-11T14:02:57.133144Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1708.06733","snapshot_observed_at":"2026-08-11T15:48:25.991577Z","title":"Bad- nets: Identifying vulnerabilities in the machine learning model supply chain","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2412.10681","last_updated":"2024-12-19T10:59:24Z","snapshot_observed_at":"2026-08-11T19:01:33.594797Z","submitted_at":"2024-12-14T05:01:46Z","title":"One Pixel is All I Need","version":2},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-11T15:48:25.991577Z"},"links":{"cited_paper":"/paper/1708.06733","citing_paper":"/paper/2412.10681"},"observation_digest":"sha256:759e45216f41cddf4b2b10e316c6c326c0ba4245f106678fe5179b611b0739b8","observation_id":"117e5c92-7527-4511-885f-157d419bac20","resolution":{"observed_at":"2026-08-11T15:48:25.991577Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2302.03251","last_updated":"2023-02-19T01:32:21Z","snapshot_observed_at":"2026-07-06T14:49:07.867567Z","submitted_at":"2023-02-07T04:33:41Z","title":"SCALE-UP: An Efficient Black-box Input-level Backdoor Detection via Analyzing Scaled Prediction Consistency","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2302.03251","snapshot_observed_at":"2026-08-11T15:48:25.995940Z","title":"Scale-up: An efficient black-box input- level backdoor detection via analyzing scaled prediction con- sistency","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2412.10681","last_updated":"2024-12-19T10:59:24Z","snapshot_observed_at":"2026-08-11T19:01:33.594797Z","submitted_at":"2024-12-14T05:01:46Z","title":"One Pixel is All I Need","version":2},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-11T15:48:25.995940Z"},"links":{"cited_paper":"/paper/2302.03251","citing_paper":"/paper/2412.10681"},"observation_digest":"sha256:bbd33fa5714ce1a65a75c41f40b611bd3759e3e05300d251b0ccf921247499b0","observation_id":"f7c7dd04-5fae-4307-9468-a1b53b7138db","resolution":{"observed_at":"2026-08-11T15:48:25.995940Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T15:48:26.000398Z","title":"Transformer in transformer","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2412.10681","last_updated":"2024-12-19T10:59:24Z","snapshot_observed_at":"2026-08-11T19:01:33.594797Z","submitted_at":"2024-12-14T05:01:46Z","title":"One Pixel is All I Need","version":2},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-11T15:48:26.000398Z"},"links":{"citing_paper":"/paper/2412.10681"},"observation_digest":"sha256:68a5511a3a5c4eeee4eeee67a597b77029bdffa0dbe7574254fbc16bf52aea41","observation_id":"029dbb49-9027-478e-a27e-546ed2805dec","resolution":{"observed_at":"2026-08-11T15:48:26.000398Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T15:48:26.004648Z","title":"Rethinking spa- tial dimensions of vision transformers","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2412.10681","last_updated":"2024-12-19T10:59:24Z","snapshot_observed_at":"2026-08-11T19:01:33.594797Z","submitted_at":"2024-12-14T05:01:46Z","title":"One Pixel is All I Need","version":2},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-11T15:48:26.004648Z"},"links":{"citing_paper":"/paper/2412.10681"},"observation_digest":"sha256:9910ec511dc849d80a9be624372ecec323dd1938cd1b5c4cbae6ac844e25bd67","observation_id":"20f5a202-11d2-44c8-8a1d-da460a9fcda3","resolution":{"observed_at":"2026-08-11T15:48:26.004648Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1909.11942","last_updated":"2020-02-09T03:00:18Z","snapshot_observed_at":"2026-07-06T08:24:44.631342Z","submitted_at":"2019-09-26T07:06:13Z","title":"ALBERT: A Lite BERT for Self-supervised Learning of Language Representations","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1909.11942","snapshot_observed_at":"2026-08-11T15:48:26.134500Z","title":"Albert: A lite bert for self-supervised learning of language representations","venue":null,"work_id":null,"year":1909},"citing_paper":{"arxiv_id":"2412.10681","last_updated":"2024-12-19T10:59:24Z","snapshot_observed_at":"2026-08-11T19:01:33.594797Z","submitted_at":"2024-12-14T05:01:46Z","title":"One Pixel is All I Need","version":2},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-11T15:48:26.134500Z"},"links":{"cited_paper":"/paper/1909.11942","citing_paper":"/paper/2412.10681"},"observation_digest":"sha256:bc768c3839fbce5fa8403d94848293681b8fcc6bd8c5e1db3612fa7987cb1e0f","observation_id":"cf4a68b8-3272-49c8-b1af-e4303e15d707","resolution":{"observed_at":"2026-08-11T15:48:26.134500Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T15:48:28.713779Z","title":"Nearest is not dearest: Towards practical defense against quantization-conditioned backdoor attacks","venue":null,"work_id":"5c03e762-5832-4ba1-8a57-aa29e399a1d7","year":2024},"citing_paper":{"arxiv_id":"2412.10681","last_updated":"2024-12-19T10:59:24Z","snapshot_observed_at":"2026-08-11T19:01:33.594797Z","submitted_at":"2024-12-14T05:01:46Z","title":"One Pixel is All I Need","version":2},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-11T15:48:26.139189Z"},"links":{"citing_paper":"/paper/2412.10681"},"observation_digest":"sha256:43a25c4ebd4409963782a1caea87fc17ad37e54f01cd46202a8fb6dca547e5bc","observation_id":"d32ef89e-0995-41bb-8610-07c142e16548","resolution":{"observed_at":"2026-08-11T15:48:28.718227Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2004.04692","last_updated":"2021-01-31T17:25:49Z","snapshot_observed_at":"2026-08-09T00:58:38.537061Z","submitted_at":"2020-04-09T17:19:37Z","title":"Rethinking the Trigger of Backdoor Attack","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2004.04692","snapshot_observed_at":"2026-08-11T15:48:26.143347Z","title":"Rethinking the trigger of back- door attack","venue":null,"work_id":null,"year":2004},"citing_paper":{"arxiv_id":"2412.10681","last_updated":"2024-12-19T10:59:24Z","snapshot_observed_at":"2026-08-11T19:01:33.594797Z","submitted_at":"2024-12-14T05:01:46Z","title":"One Pixel is All I Need","version":2},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-11T15:48:26.143347Z"},"links":{"cited_paper":"/paper/2004.04692","citing_paper":"/paper/2412.10681"},"observation_digest":"sha256:adb62de4b7e477ecab4f2bd892d16dcf674fa732dad8cafa9f9daf6918cdd327","observation_id":"e13415ac-17d6-4bd7-94ae-0ca95fe72741","resolution":{"observed_at":"2026-08-11T15:48:26.143347Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T15:48:26.147559Z","title":"Back- door learning: A survey","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2412.10681","last_updated":"2024-12-19T10:59:24Z","snapshot_observed_at":"2026-08-11T19:01:33.594797Z","submitted_at":"2024-12-14T05:01:46Z","title":"One Pixel is All I Need","version":2},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-11T15:48:26.147559Z"},"links":{"citing_paper":"/paper/2412.10681"},"observation_digest":"sha256:40b450c7bd74d93115c3c189c4988ce3ebf84cb34f0a222e1a31b7cd31aa2c0d","observation_id":"c0fcaab3-806d-4aa0-933a-a511cea6e276","resolution":{"observed_at":"2026-08-11T15:48:26.147559Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T15:48:28.583156Z","title":"Efficientformer: Vision transformers at mobilenet speed","venue":null,"work_id":"08399398-fe10-4ea7-bf4e-dfa5ff6191ba","year":2022},"citing_paper":{"arxiv_id":"2412.10681","last_updated":"2024-12-19T10:59:24Z","snapshot_observed_at":"2026-08-11T19:01:33.594797Z","submitted_at":"2024-12-14T05:01:46Z","title":"One Pixel is All I Need","version":2},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-11T15:48:26.151579Z"},"links":{"citing_paper":"/paper/2412.10681"},"observation_digest":"sha256:a6f79a5832b99076a98bf3e97489e0cf94f79a26f94af6b47aed5117e61e2f21","observation_id":"9f8cfa54-4186-476b-89aa-e9d0be6f8f25","resolution":{"observed_at":"2026-08-11T15:48:28.651359Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T15:48:28.517993Z","title":"Imperceptible transfer attack and defense on 3d point cloud classification","venue":null,"work_id":"fa4d2ffb-0e55-48b1-a773-722b929dac05","year":2022},"citing_paper":{"arxiv_id":"2412.10681","last_updated":"2024-12-19T10:59:24Z","snapshot_observed_at":"2026-08-11T19:01:33.594797Z","submitted_at":"2024-12-14T05:01:46Z","title":"One Pixel is All I Need","version":2},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-11T15:48:26.155293Z"},"links":{"citing_paper":"/paper/2412.10681"},"observation_digest":"sha256:15e407f2f8a806d2fb3e911f39ff1a8a9cadac3bc3578e84c13a7f013fdcf89b","observation_id":"a2bbef42-8c62-4297-afb2-0d2224aece26","resolution":{"observed_at":"2026-08-11T15:48:28.521978Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T15:48:26.159180Z","title":"Fine- pruning: Defending against backdooring attacks on deep neural networks","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2412.10681","last_updated":"2024-12-19T10:59:24Z","snapshot_observed_at":"2026-08-11T19:01:33.594797Z","submitted_at":"2024-12-14T05:01:46Z","title":"One Pixel is All I Need","version":2},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-11T15:48:26.159180Z"},"links":{"citing_paper":"/paper/2412.10681"},"observation_digest":"sha256:193d5cd26d047610741db0ed9de11e99e7af7a238b6a169d38503858a9546ae8","observation_id":"6b35a6e3-2a61-43db-89f2-3ac0a35e9d6d","resolution":{"observed_at":"2026-08-11T15:48:26.159180Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T15:48:28.496093Z","title":"Beating backdoor attack at its own game","venue":null,"work_id":"cc07c852-d09b-4440-9493-4461e90c54bc","year":2023},"citing_paper":{"arxiv_id":"2412.10681","last_updated":"2024-12-19T10:59:24Z","snapshot_observed_at":"2026-08-11T19:01:33.594797Z","submitted_at":"2024-12-14T05:01:46Z","title":"One Pixel is All I Need","version":2},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-11T15:48:26.164125Z"},"links":{"citing_paper":"/paper/2412.10681"},"observation_digest":"sha256:810e10aa2cc1c6f8f51029987469cb0d592b56a2d704f9aafd50c240591b0ef3","observation_id":"4ec66ea0-02d2-448a-aaea-47bddab6e850","resolution":{"observed_at":"2026-08-11T15:48:28.500476Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1907.11692","last_updated":"2019-07-26T17:48:29Z","snapshot_observed_at":"2026-07-31T22:31:37.910868Z","submitted_at":"2019-07-26T17:48:29Z","title":"RoBERTa: A Robustly Optimized BERT Pretraining Approach","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1907.11692","snapshot_observed_at":"2026-08-11T15:48:26.167858Z","title":"Roberta: A robustly optimized bert pretraining approach","venue":null,"work_id":null,"year":1907},"citing_paper":{"arxiv_id":"2412.10681","last_updated":"2024-12-19T10:59:24Z","snapshot_observed_at":"2026-08-11T19:01:33.594797Z","submitted_at":"2024-12-14T05:01:46Z","title":"One Pixel is All I Need","version":2},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-11T15:48:26.167858Z"},"links":{"cited_paper":"/paper/1907.11692","citing_paper":"/paper/2412.10681"},"observation_digest":"sha256:2ae13e4a1cae70626387250558909147ac4fc80a7a97ff8c43b23e5d699c4447","observation_id":"b93b08ac-5680-4c37-a13e-8ad9f374cc59","resolution":{"observed_at":"2026-08-11T15:48:26.167858Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T15:48:28.483183Z","title":"Swin transformer: Hierarchical vision transformer using shifted windows","venue":null,"work_id":"fb5af28d-fd9f-4736-b4f1-a38778f71710","year":2021},"citing_paper":{"arxiv_id":"2412.10681","last_updated":"2024-12-19T10:59:24Z","snapshot_observed_at":"2026-08-11T19:01:33.594797Z","submitted_at":"2024-12-14T05:01:46Z","title":"One Pixel is All I Need","version":2},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-11T15:48:26.287335Z"},"links":{"citing_paper":"/paper/2412.10681"},"observation_digest":"sha256:0299e92c9e36d487521b5655f49d0d2c6d4479df99c837698246e89bb3444f20","observation_id":"e11e857a-7f90-4696-a1a7-be2c8694e8b3","resolution":{"observed_at":"2026-08-11T15:48:28.487131Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2310.19380","last_updated":"2025-03-31T08:29:53Z","snapshot_observed_at":"2026-08-10T16:14:55.185574Z","submitted_at":"2023-10-30T09:35:56Z","title":"TransXNet: Learning Both Global and Local Dynamics with a Dual Dynamic Token Mixer for Visual Recognition","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.19380","snapshot_observed_at":"2026-08-11T15:48:26.402855Z","title":"Transxnet: learning both global and local dynamics with a dual dynamic token mixer for visual recognition","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2412.10681","last_updated":"2024-12-19T10:59:24Z","snapshot_observed_at":"2026-08-11T19:01:33.594797Z","submitted_at":"2024-12-14T05:01:46Z","title":"One Pixel is All I Need","version":2},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-11T15:48:26.402855Z"},"links":{"cited_paper":"/paper/2310.19380","citing_paper":"/paper/2412.10681"},"observation_digest":"sha256:155de67cdca6c8438f3c4f9050c72ba2c822c71eef91e3c4b8992cc04abf285d","observation_id":"b40864a8-7efa-42fd-9510-9c9f897ca972","resolution":{"observed_at":"2026-08-11T15:48:26.402855Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T15:48:28.469288Z","title":"On the robustness of vision transformers to adversarial ex- amples","venue":null,"work_id":"4f747a13-e5e5-4523-9a91-fe8ccde29029","year":2021},"citing_paper":{"arxiv_id":"2412.10681","last_updated":"2024-12-19T10:59:24Z","snapshot_observed_at":"2026-08-11T19:01:33.594797Z","submitted_at":"2024-12-14T05:01:46Z","title":"One Pixel is All I Need","version":2},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-11T15:48:26.525737Z"},"links":{"citing_paper":"/paper/2412.10681"},"observation_digest":"sha256:1d43a6679b0ea8a5f460bdba06f255a612157a4ae43e4c332863f0e4ac41532a","observation_id":"ea22deab-1edb-476f-8198-24275d8b90d4","resolution":{"observed_at":"2026-08-11T15:48:28.474268Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T15:48:28.311344Z","title":"Hidden trigger backdoor attacks","venue":null,"work_id":"ca93875b-ac94-430f-850c-884a9f105860","year":2020},"citing_paper":{"arxiv_id":"2412.10681","last_updated":"2024-12-19T10:59:24Z","snapshot_observed_at":"2026-08-11T19:01:33.594797Z","submitted_at":"2024-12-14T05:01:46Z","title":"One Pixel is All I Need","version":2},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-11T15:48:26.530501Z"},"links":{"citing_paper":"/paper/2412.10681"},"observation_digest":"sha256:3d2e4a8070f604073227d9c910b86851f5a2596dcb19e910155370cf0a31ef57","observation_id":"10993688-3a16-4a47-81a3-d120445b21fa","resolution":{"observed_at":"2026-08-11T15:48:28.376028Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T15:48:26.535004Z","title":"Grad-cam: Visual explanations from deep networks via gradient-based localization","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2412.10681","last_updated":"2024-12-19T10:59:24Z","snapshot_observed_at":"2026-08-11T19:01:33.594797Z","submitted_at":"2024-12-14T05:01:46Z","title":"One Pixel is All I Need","version":2},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-11T15:48:26.535004Z"},"links":{"citing_paper":"/paper/2412.10681"},"observation_digest":"sha256:8b079a04bcde0e205cb2432e06635d29e488703145614e11484c962c44494cc2","observation_id":"f01f191a-f10d-4d4a-ae00-c259c5b2cad6","resolution":{"observed_at":"2026-08-11T15:48:26.535004Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1706.03825","last_updated":"2017-06-12T19:53:30Z","snapshot_observed_at":"2026-07-06T05:46:32.599765Z","submitted_at":"2017-06-12T19:53:30Z","title":"SmoothGrad: removing noise by adding noise","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1706.03825","snapshot_observed_at":"2026-08-11T15:48:26.539442Z","title":"Smoothgrad: removing noise by adding noise","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2412.10681","last_updated":"2024-12-19T10:59:24Z","snapshot_observed_at":"2026-08-11T19:01:33.594797Z","submitted_at":"2024-12-14T05:01:46Z","title":"One Pixel is All I Need","version":2},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-11T15:48:26.539442Z"},"links":{"cited_paper":"/paper/1706.03825","citing_paper":"/paper/2412.10681"},"observation_digest":"sha256:332e63d11ed0a5fa8f2fc0d3c8ad33c49b41ba6c3c7a136d58b4aa3dec54b0c1","observation_id":"d933ff43-8a77-46a3-a02b-7a2d517af8bd","resolution":{"observed_at":"2026-08-11T15:48:26.539442Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T15:48:26.544054Z","title":"Segmenter: Transformer for semantic segmenta- tion","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2412.10681","last_updated":"2024-12-19T10:59:24Z","snapshot_observed_at":"2026-08-11T19:01:33.594797Z","submitted_at":"2024-12-14T05:01:46Z","title":"One Pixel is All I Need","version":2},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-11T15:48:26.544054Z"},"links":{"citing_paper":"/paper/2412.10681"},"observation_digest":"sha256:9b75552acd9c596bc2c941c3a73b1a37af62fc71be7e5532b8f6909dc2af73fd","observation_id":"136f4d20-bb0a-4638-b71a-cb40dbb067b8","resolution":{"observed_at":"2026-08-11T15:48:26.544054Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T15:48:26.549083Z","title":"One pixel attack for fooling deep neural networks","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2412.10681","last_updated":"2024-12-19T10:59:24Z","snapshot_observed_at":"2026-08-11T19:01:33.594797Z","submitted_at":"2024-12-14T05:01:46Z","title":"One Pixel is All I Need","version":2},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-11T15:48:26.549083Z"},"links":{"citing_paper":"/paper/2412.10681"},"observation_digest":"sha256:c47a1273a78638d941b7c3d3f1ae33b5795aeb8cbce69fc5d7f3daa41f418041","observation_id":"9423e430-5684-46ce-b37f-aa26a5092db7","resolution":{"observed_at":"2026-08-11T15:48:26.549083Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T15:48:28.272000Z","title":"Backdoor attacks on crowd counting","venue":null,"work_id":"1c4d3bd3-5168-465f-a1f9-d7f656f22809","year":null},"citing_paper":{"arxiv_id":"2412.10681","last_updated":"2024-12-19T10:59:24Z","snapshot_observed_at":"2026-08-11T19:01:33.594797Z","submitted_at":"2024-12-14T05:01:46Z","title":"One Pixel is All I Need","version":2},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-11T15:48:26.553913Z"},"links":{"citing_paper":"/paper/2412.10681"},"observation_digest":"sha256:54877c952e6cdf32e012a20b97077196e3827e2ae43b5aa65145a078eefcccb9","observation_id":"ed8474ce-23c8-4260-ab67-8c08bf1ed0d1","resolution":{"observed_at":"2026-08-11T15:48:28.277757Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1312.6199","last_updated":"2014-02-19T16:33:14Z","snapshot_observed_at":"2026-07-06T03:31:33.797310Z","submitted_at":"2013-12-21T03:36:08Z","title":"Intriguing properties of neural networks","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1312.6199","snapshot_observed_at":"2026-08-11T15:48:26.558129Z","title":"Intriguing properties of neural networks","venue":null,"work_id":null,"year":2013},"citing_paper":{"arxiv_id":"2412.10681","last_updated":"2024-12-19T10:59:24Z","snapshot_observed_at":"2026-08-11T19:01:33.594797Z","submitted_at":"2024-12-14T05:01:46Z","title":"One Pixel is All I Need","version":2},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-11T15:48:26.558129Z"},"links":{"cited_paper":"/paper/1312.6199","citing_paper":"/paper/2412.10681"},"observation_digest":"sha256:6600a596f024e3ddf5a7bcf46947bd18193263d1854af272670626eea0b76f06","observation_id":"aedebd3e-06b2-4bf6-88fd-4d8d0721f982","resolution":{"observed_at":"2026-08-11T15:48:26.558129Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T15:48:28.229932Z","title":"Training data-efficient image transformers & distillation through at- tention","venue":null,"work_id":"cf1ceeee-d559-4946-9c08-91ccc19689fc","year":2021},"citing_paper":{"arxiv_id":"2412.10681","last_updated":"2024-12-19T10:59:24Z","snapshot_observed_at":"2026-08-11T19:01:33.594797Z","submitted_at":"2024-12-14T05:01:46Z","title":"One Pixel is All I Need","version":2},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-11T15:48:26.562002Z"},"links":{"citing_paper":"/paper/2412.10681"},"observation_digest":"sha256:b78c320c55854a807df03b9e4147a144ecd707dbe871b8933c0ebc4d53a4e083","observation_id":"60b8b67f-fe54-4202-b201-4cfb5c2901ee","resolution":{"observed_at":"2026-08-11T15:48:28.260405Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T15:48:26.567289Z","title":"Attention is all you need","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2412.10681","last_updated":"2024-12-19T10:59:24Z","snapshot_observed_at":"2026-08-11T19:01:33.594797Z","submitted_at":"2024-12-14T05:01:46Z","title":"One Pixel is All I Need","version":2},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-11T15:48:26.567289Z"},"links":{"citing_paper":"/paper/2412.10681"},"observation_digest":"sha256:d1de75c66c5f394766ac48ea6b706399b2b69a7f063e42c81a90e7049f4b4acb","observation_id":"889b58f2-ca50-4fb5-a7e7-0015a754359e","resolution":{"observed_at":"2026-08-11T15:48:26.567289Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T15:48:28.027420Z","title":"Neural cleanse: Identifying and mitigating backdoor attacks in neu- ral networks","venue":null,"work_id":"0b01d485-9cc3-4fe4-b0f7-d888297e33a8","year":2019},"citing_paper":{"arxiv_id":"2412.10681","last_updated":"2024-12-19T10:59:24Z","snapshot_observed_at":"2026-08-11T19:01:33.594797Z","submitted_at":"2024-12-14T05:01:46Z","title":"One Pixel is All I Need","version":2},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-11T15:48:26.571690Z"},"links":{"citing_paper":"/paper/2412.10681"},"observation_digest":"sha256:4f0486253fa478ba78ea8d38002f5f4ccfc8c844c9299169e924eee7191eeb11","observation_id":"63a7eca9-704b-4de0-8ffc-7d7ab422cbbd","resolution":{"observed_at":"2026-08-11T15:48:28.079041Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T15:48:26.731645Z","title":"Pyramid vision transformer: A versatile backbone for dense prediction without convolutions","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2412.10681","last_updated":"2024-12-19T10:59:24Z","snapshot_observed_at":"2026-08-11T19:01:33.594797Z","submitted_at":"2024-12-14T05:01:46Z","title":"One Pixel is All I Need","version":2},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-11T15:48:26.731645Z"},"links":{"citing_paper":"/paper/2412.10681"},"observation_digest":"sha256:7d3bf040b92de9fecbc92aea8e7bcb68409da8fe3906d11409f69f0727411c6f","observation_id":"bdca4043-4a28-4f34-9b49-11d6fa67446e","resolution":{"observed_at":"2026-08-11T15:48:26.731645Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T15:48:26.835693Z","title":"Early convolutions help trans- formers see better","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2412.10681","last_updated":"2024-12-19T10:59:24Z","snapshot_observed_at":"2026-08-11T19:01:33.594797Z","submitted_at":"2024-12-14T05:01:46Z","title":"One Pixel is All I Need","version":2},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-11T15:48:26.835693Z"},"links":{"citing_paper":"/paper/2412.10681"},"observation_digest":"sha256:43c0acec08d42a169de1d62f0e8631f8127acba3dae3e8c149366172ee86f42b","observation_id":"104b0338-e840-4e69-89d4-4496c0edbe9f","resolution":{"observed_at":"2026-08-11T15:48:26.835693Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T15:48:27.995623Z","title":"Not all prompts are secure: A switch- able backdoor attack against pre-trained vision transfomers","venue":null,"work_id":"69bd74a9-41c5-476c-be6c-a89b5854dac9","year":2024},"citing_paper":{"arxiv_id":"2412.10681","last_updated":"2024-12-19T10:59:24Z","snapshot_observed_at":"2026-08-11T19:01:33.594797Z","submitted_at":"2024-12-14T05:01:46Z","title":"One Pixel is All I Need","version":2},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-11T15:48:26.885039Z"},"links":{"citing_paper":"/paper/2412.10681"},"observation_digest":"sha256:73d76d30eab4cdfade7a237d098e7b893e5cd53386fe4710804546e57a546df8","observation_id":"97be5a95-d13f-460d-a134-b4025cc2432a","resolution":{"observed_at":"2026-08-11T15:48:28.000886Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T15:48:27.806404Z","title":"Gpt (generative pre-trained transformer)–a comprehensive review on enabling technolo- gies, potential applications, emerging challenges, and future directions","venue":null,"work_id":"95e3f89a-59aa-4569-b07c-12e2f675fad4","year":2024},"citing_paper":{"arxiv_id":"2412.10681","last_updated":"2024-12-19T10:59:24Z","snapshot_observed_at":"2026-08-11T19:01:33.594797Z","submitted_at":"2024-12-14T05:01:46Z","title":"One Pixel is All I Need","version":2},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-11T15:48:26.931175Z"},"links":{"citing_paper":"/paper/2412.10681"},"observation_digest":"sha256:55d3a0e2b6676bc12514d03cde7f2af078f0b5245d599ff97c4082ef9238e419","observation_id":"e497e697-02e6-435e-8b6d-50aa9b26c1b2","resolution":{"observed_at":"2026-08-11T15:48:27.933351Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T15:48:27.791982Z","title":"Enhanced coalescence backdoor attack against dnn based on pixel gradient","venue":null,"work_id":"34107afb-e201-4513-aa9b-c5321f438c95","year":2024},"citing_paper":{"arxiv_id":"2412.10681","last_updated":"2024-12-19T10:59:24Z","snapshot_observed_at":"2026-08-11T19:01:33.594797Z","submitted_at":"2024-12-14T05:01:46Z","title":"One Pixel is All I Need","version":2},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-11T15:48:26.934844Z"},"links":{"citing_paper":"/paper/2412.10681"},"observation_digest":"sha256:9239754e5ad7d01e740f1b8af642630e046c9d3219a37e3bf550b7f1c8c00ad0","observation_id":"2c172ec5-d0d7-4f74-bc2d-688a7173c08d","resolution":{"observed_at":"2026-08-11T15:48:27.796574Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T15:48:27.581974Z","title":"Backdoor attacks against deep image compression via adaptive frequency trigger","venue":null,"work_id":"cfb81424-d145-4f2f-81ea-d3854c0689ae","year":2023},"citing_paper":{"arxiv_id":"2412.10681","last_updated":"2024-12-19T10:59:24Z","snapshot_observed_at":"2026-08-11T19:01:33.594797Z","submitted_at":"2024-12-14T05:01:46Z","title":"One Pixel is All I Need","version":2},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-11T15:48:26.938857Z"},"links":{"citing_paper":"/paper/2412.10681"},"observation_digest":"sha256:e81e4bfb3cea5650c2914573952f7f89887ef3e9513854561033d7d4036e90c9","observation_id":"1c818f61-9ea1-4494-929f-93de72e542a6","resolution":{"observed_at":"2026-08-11T15:48:27.734330Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T15:48:26.942986Z","title":"Tokens-to-token vit: Training vision transformers from scratch on imagenet","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2412.10681","last_updated":"2024-12-19T10:59:24Z","snapshot_observed_at":"2026-08-11T19:01:33.594797Z","submitted_at":"2024-12-14T05:01:46Z","title":"One Pixel is All I Need","version":2},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-11T15:48:26.942986Z"},"links":{"citing_paper":"/paper/2412.10681"},"observation_digest":"sha256:aeabb15126b01202be8e4796e55c428fd9f20c3b2dfb6127a72d1e38c18926b1","observation_id":"39bc17f6-d737-4dd5-8bae-a616f8b7f146","resolution":{"observed_at":"2026-08-11T15:48:26.942986Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T15:48:27.560223Z","title":null,"venue":null,"work_id":"04144936-0e83-4574-8bd1-f4c83a5c9c64","year":2023},"citing_paper":{"arxiv_id":"2412.10681","last_updated":"2024-12-19T10:59:24Z","snapshot_observed_at":"2026-08-11T19:01:33.594797Z","submitted_at":"2024-12-14T05:01:46Z","title":"One Pixel is All I Need","version":2},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-11T15:48:26.947339Z"},"links":{"citing_paper":"/paper/2412.10681"},"observation_digest":"sha256:d49a39df7f4e0e37fdff99bb200f05247b34b450f880fbefc6176a09f875631f","observation_id":"feccaf97-ae1c-40ac-ab46-354b83724f39","resolution":{"observed_at":"2026-08-11T15:48:27.564513Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T15:48:27.545179Z","title":"Informer: Beyond efficient transformer for long sequence time-series forecast- ing","venue":null,"work_id":"33a5c5bd-6235-4281-8556-7f5e9206cdbf","year":2021},"citing_paper":{"arxiv_id":"2412.10681","last_updated":"2024-12-19T10:59:24Z","snapshot_observed_at":"2026-08-11T19:01:33.594797Z","submitted_at":"2024-12-14T05:01:46Z","title":"One Pixel is All I Need","version":2},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-11T15:48:26.951197Z"},"links":{"citing_paper":"/paper/2412.10681"},"observation_digest":"sha256:ff23d1d7e252787f8092cfabbb6f7f3f6a05ac805f7e68a110722957ec3ba599","observation_id":"c3e95a60-f604-49f9-af8a-800265888c56","resolution":{"observed_at":"2026-08-11T15:48:27.549822Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T15:48:27.479023Z","title":"• Impact of PSDM on Backdoor Patterns: Based on the PSDM of the VIT model, we traversed multiple patches along the diagonal and placed a white square trigger of size 4 for training","venue":null,"work_id":"a5e5f3f6-35f1-4333-880b-b13e118dcefe","year":null},"citing_paper":{"arxiv_id":"2412.10681","last_updated":"2024-12-19T10:59:24Z","snapshot_observed_at":"2026-08-11T19:01:33.594797Z","submitted_at":"2024-12-14T05:01:46Z","title":"One Pixel is All I Need","version":2},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-11T15:48:26.955290Z"},"links":{"citing_paper":"/paper/2412.10681"},"observation_digest":"sha256:82d9c5d514d5b625ae426228a35ad8984cd37241ac6c8106f83983a8d4dd2a62","observation_id":"9162ea49-5086-4d65-95f9-a5609ea186fc","resolution":{"observed_at":"2026-08-11T15:48:27.536305Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T15:48:27.297125Z","title":"Lclean = E(x,y)∼Dclean [ℓ(f (x), y)] (1)","venue":null,"work_id":"eeb9e831-6061-490e-9e03-0a73cb7a447e","year":null},"citing_paper":{"arxiv_id":"2412.10681","last_updated":"2024-12-19T10:59:24Z","snapshot_observed_at":"2026-08-11T19:01:33.594797Z","submitted_at":"2024-12-14T05:01:46Z","title":"One Pixel is All I Need","version":2},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-11T15:48:26.959581Z"},"links":{"citing_paper":"/paper/2412.10681"},"observation_digest":"sha256:6e8b827e5d76599ece8d530495e796afa5c42ca7e27203dd98e890465329f4f9","observation_id":"642296b0-23cd-4dfb-a068-8715c90c99c1","resolution":{"observed_at":"2026-08-11T15:48:27.358564Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T15:48:27.283742Z","title":"Lbackdoor = E(x,y)∼Dbackdoor [ℓ(f (x + t), ybackdoor)] (2)","venue":null,"work_id":"3553fba2-67ea-465c-98f7-c7a8430a7083","year":null},"citing_paper":{"arxiv_id":"2412.10681","last_updated":"2024-12-19T10:59:24Z","snapshot_observed_at":"2026-08-11T19:01:33.594797Z","submitted_at":"2024-12-14T05:01:46Z","title":"One Pixel is All I Need","version":2},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-11T15:48:26.963723Z"},"links":{"citing_paper":"/paper/2412.10681"},"observation_digest":"sha256:20c5b90ecbd5f08ff78d2ec6a637d044a356509b0d0829db31c4245e2691bfd2","observation_id":"9b0bd0e8-ec04-4b57-9f45-3051982725f7","resolution":{"observed_at":"2026-08-11T15:48:27.288378Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T15:48:27.269912Z","title":"Lsuppression = E(x,y)∼Dpartial [ℓ(f (x + tpartial), yclean)] (3) The model does not always learn the backdoor suppres- sion mode effectively","venue":null,"work_id":"ac9dcdba-d820-4805-a194-b81845d17dcd","year":null},"citing_paper":{"arxiv_id":"2412.10681","last_updated":"2024-12-19T10:59:24Z","snapshot_observed_at":"2026-08-11T19:01:33.594797Z","submitted_at":"2024-12-14T05:01:46Z","title":"One Pixel is All I Need","version":2},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-11T15:48:26.968010Z"},"links":{"citing_paper":"/paper/2412.10681"},"observation_digest":"sha256:10721edda03850a8b74f5e1e805038e148795596aa7826c47e288219513461c6","observation_id":"df6ea9ad-9bca-4cd8-9746-e0ba154eb8e4","resolution":{"observed_at":"2026-08-11T15:48:27.273902Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2412.10681","last_updated":"2024-12-19T10:59:24Z","latest_version":2,"primary_category":"cs.CV","snapshot_observed_at":"2026-08-11T19:01:33.594797Z","submitted_at":"2024-12-14T05:01:46Z","title":"One Pixel is All I Need"},"reference_resolution":{"displayed":51,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":28,"verified_exact":1,"verified_fuzzy":22},"total_outbound_references":51},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"thesis":"As of 12 August 2026, this Paper Citation Record lists 51 of 51 outbound references and 0 inbound Pith citation observations for arXiv:2412.10681."}