{"as_of":"2026-08-09T00:09:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:8890dfd778be044eed161ddf22cd4e1a82e335f8d72db68c6ba240ffc5d9dc30","coverage":[{"denominator":36,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":36,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T19:18:22.042145Z","state":"measured"},{"denominator":36,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":36,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-08T06:32:00.761636+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2502.10490/citation-record","integrity":"/paper/2502.10490/integrity","json":"/paper/2502.10490/citation-record.json","paper":"/paper/2502.10490"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T19:18:22.951972Z","title":"Speech recognition with deep recurrent neural networks,","venue":null,"work_id":"34e2de78-a9b9-4c18-8075-f929122d00d3","year":2013},"citing_paper":{"arxiv_id":"2502.10490","last_updated":"2025-02-14T13:15:13Z","snapshot_observed_at":"2026-08-07T19:10:57.274990Z","submitted_at":"2025-02-14T13:15:13Z","title":"A Robust Attack: Displacement Backdoor Attack","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-07T19:18:21.908006Z"},"links":{"citing_paper":"/paper/2502.10490"},"observation_digest":"sha256:3f0176dad652110eb2a0a384343d1276970b753d7d262bd38b7746c79c7d76ca","observation_id":"25d09a0e-e9c6-420b-802a-72221c21c437","resolution":{"observed_at":"2026-08-07T19:18:22.956440Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T19:18:21.911969Z","title":"Deep residual learning for image recognition,","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2502.10490","last_updated":"2025-02-14T13:15:13Z","snapshot_observed_at":"2026-08-07T19:10:57.274990Z","submitted_at":"2025-02-14T13:15:13Z","title":"A Robust Attack: Displacement Backdoor Attack","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-07T19:18:21.911969Z"},"links":{"citing_paper":"/paper/2502.10490"},"observation_digest":"sha256:ab213807af9e1a3cf4fc81248e23570defd1a290582386a6b8137967bd018be6","observation_id":"c37fffb2-66f3-4ecb-9a43-e6832d70a026","resolution":{"observed_at":"2026-08-07T19:18:21.911969Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T19:18:22.933068Z","title":"Imagenet classification with deep convolutional neural networks,","venue":null,"work_id":"a90ab8f4-6832-4b08-9dad-cb68d976d2af","year":2012},"citing_paper":{"arxiv_id":"2502.10490","last_updated":"2025-02-14T13:15:13Z","snapshot_observed_at":"2026-08-07T19:10:57.274990Z","submitted_at":"2025-02-14T13:15:13Z","title":"A Robust Attack: Displacement Backdoor Attack","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-07T19:18:21.916384Z"},"links":{"citing_paper":"/paper/2502.10490"},"observation_digest":"sha256:3f00a5b2d8b1c42edf8ba29096a492c1f2bb9b4677099746a483266a4af20782","observation_id":"5f91adcf-83ca-40ef-9346-4eb9b9a236a3","resolution":{"observed_at":"2026-08-07T19:18:22.937745Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T19:18:22.922406Z","title":"Past, present, and future of face recognition: A review,","venue":null,"work_id":"1f8be183-d9b4-40df-afb5-7ad02cbf0eda","year":2020},"citing_paper":{"arxiv_id":"2502.10490","last_updated":"2025-02-14T13:15:13Z","snapshot_observed_at":"2026-08-07T19:10:57.274990Z","submitted_at":"2025-02-14T13:15:13Z","title":"A Robust Attack: Displacement Backdoor Attack","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-07T19:18:21.921377Z"},"links":{"citing_paper":"/paper/2502.10490"},"observation_digest":"sha256:9e4fffcaf61577617c65c3407a5f98e66bbda981b77a2f1ff8d909a4d7ae4782","observation_id":"003fcb55-4ef4-4d23-9135-f606a9783da9","resolution":{"observed_at":"2026-08-07T19:18:22.926278Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T19:18:22.832686Z","title":"Computing systems for autonomous driving: State of the art and challenges,","venue":null,"work_id":"e4c078bd-dd3f-422e-89d2-539f2666fe8a","year":2020},"citing_paper":{"arxiv_id":"2502.10490","last_updated":"2025-02-14T13:15:13Z","snapshot_observed_at":"2026-08-07T19:10:57.274990Z","submitted_at":"2025-02-14T13:15:13Z","title":"A Robust Attack: Displacement Backdoor Attack","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-07T19:18:21.925402Z"},"links":{"citing_paper":"/paper/2502.10490"},"observation_digest":"sha256:fbbf8a8b56ac8a157b77b070e7ca67a9c9edf0189d9de85d3fbdb315888e46f6","observation_id":"6d5dcfce-9c84-49ac-8f96-451f5a0d4a4a","resolution":{"observed_at":"2026-08-07T19:18:22.891197Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T19:18:22.647731Z","title":"Mrtrix3: A fast, flexible and open software framework for medical image processing and visualisation,","venue":null,"work_id":"4d0802e8-8cbc-4c17-801b-50570ca3cb1d","year":2019},"citing_paper":{"arxiv_id":"2502.10490","last_updated":"2025-02-14T13:15:13Z","snapshot_observed_at":"2026-08-07T19:10:57.274990Z","submitted_at":"2025-02-14T13:15:13Z","title":"A Robust Attack: Displacement Backdoor Attack","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-07T19:18:21.929204Z"},"links":{"citing_paper":"/paper/2502.10490"},"observation_digest":"sha256:3b4a6f85e4d8c465885a03a13a3f754c02035d51bf4c536c1aaac031a7f1316e","observation_id":"b6263a16-9a4a-433f-8433-c61cb1cc823d","resolution":{"observed_at":"2026-08-07T19:18:22.728671Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T19:18:22.599248Z","title":"Sequence to sequence learning with neural networks,","venue":null,"work_id":"51eb5461-47b2-46f8-a585-723d9ab33c63","year":2014},"citing_paper":{"arxiv_id":"2502.10490","last_updated":"2025-02-14T13:15:13Z","snapshot_observed_at":"2026-08-07T19:10:57.274990Z","submitted_at":"2025-02-14T13:15:13Z","title":"A Robust Attack: Displacement Backdoor Attack","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-07T19:18:21.933241Z"},"links":{"citing_paper":"/paper/2502.10490"},"observation_digest":"sha256:a564eb790bf41d2547d0fb8b781619103b947f63a8898481c06acd6222923ea3","observation_id":"a80c73a1-fce3-4628-842a-45cad251560f","resolution":{"observed_at":"2026-08-07T19:18:22.603134Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T19:18:22.588400Z","title":"Badnets: Identifying vulnerabili- ties in the machine learning model supply chain,","venue":null,"work_id":"58b71ec8-57e2-417b-9849-e13f67f9a9a1","year":2019},"citing_paper":{"arxiv_id":"2502.10490","last_updated":"2025-02-14T13:15:13Z","snapshot_observed_at":"2026-08-07T19:10:57.274990Z","submitted_at":"2025-02-14T13:15:13Z","title":"A Robust Attack: Displacement Backdoor Attack","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-07T19:18:21.937000Z"},"links":{"citing_paper":"/paper/2502.10490"},"observation_digest":"sha256:ad3c7ad166b5579e028583207f6ed8020cf73073a1fa16b45e90d14b1a95409b","observation_id":"0c610f35-8302-4f07-902c-505651de629d","resolution":{"observed_at":"2026-08-07T19:18:22.592407Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1712.05526","last_updated":"2017-12-15T04:26:26Z","snapshot_observed_at":"2026-07-06T06:14:30.795326Z","submitted_at":"2017-12-15T04:26:26Z","title":"Targeted Backdoor Attacks on Deep Learning Systems Using Data Poisoning","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1712.05526","snapshot_observed_at":"2026-08-07T19:18:21.941470Z","title":"Targeted backdoor attacks on deep learning systems using data poisoning,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2502.10490","last_updated":"2025-02-14T13:15:13Z","snapshot_observed_at":"2026-08-07T19:10:57.274990Z","submitted_at":"2025-02-14T13:15:13Z","title":"A Robust Attack: Displacement Backdoor Attack","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-07T19:18:21.941470Z"},"links":{"cited_paper":"/paper/1712.05526","citing_paper":"/paper/2502.10490"},"observation_digest":"sha256:9164fe74af4e0a201af7f21490e7d43ccb206d5cb27fb717bcad882826711a05","observation_id":"e2fd6bdf-b9b7-41f3-a51e-911386e0aa97","resolution":{"observed_at":"2026-08-07T19:18:21.941470Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T19:18:22.577425Z","title":"Reflection backdoor: A natural backdoor attack on deep neural networks,","venue":null,"work_id":"b12b185f-5bbc-4377-8028-20d5af33f986","year":2020},"citing_paper":{"arxiv_id":"2502.10490","last_updated":"2025-02-14T13:15:13Z","snapshot_observed_at":"2026-08-07T19:10:57.274990Z","submitted_at":"2025-02-14T13:15:13Z","title":"A Robust Attack: Displacement Backdoor Attack","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-07T19:18:21.945186Z"},"links":{"citing_paper":"/paper/2502.10490"},"observation_digest":"sha256:525b8717026b37b510621695d1e58f5d8d3c623db7d7b05d9b56bd0f465a9b0e","observation_id":"0935c5cd-037a-4b68-a33a-791f554fd282","resolution":{"observed_at":"2026-08-07T19:18:22.582046Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T19:18:22.566240Z","title":"A new backdoor attack in cnns by training set corruption without label poisoning,","venue":null,"work_id":"4b311f32-410f-4a1e-a2e2-98dcdf645125","year":2019},"citing_paper":{"arxiv_id":"2502.10490","last_updated":"2025-02-14T13:15:13Z","snapshot_observed_at":"2026-08-07T19:10:57.274990Z","submitted_at":"2025-02-14T13:15:13Z","title":"A Robust Attack: Displacement Backdoor Attack","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-07T19:18:21.948511Z"},"links":{"citing_paper":"/paper/2502.10490"},"observation_digest":"sha256:4bda1df41ff8edf5198be74e977600f9048761fe5856aa73a3dbad6f359c99da","observation_id":"fc4888c8-c65e-4fec-966e-13c8b6ed73e6","resolution":{"observed_at":"2026-08-07T19:18:22.570496Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2102.10369","last_updated":"2021-03-04T04:09:38Z","snapshot_observed_at":"2026-08-02T13:52:44.392403Z","submitted_at":"2021-02-20T15:25:36Z","title":"WaNet -- Imperceptible Warping-based Backdoor Attack","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2102.10369","snapshot_observed_at":"2026-08-07T19:18:21.952290Z","title":"Wanet–imperceptible warping-based backdoor attack,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2502.10490","last_updated":"2025-02-14T13:15:13Z","snapshot_observed_at":"2026-08-07T19:10:57.274990Z","submitted_at":"2025-02-14T13:15:13Z","title":"A Robust Attack: Displacement Backdoor Attack","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-07T19:18:21.952290Z"},"links":{"cited_paper":"/paper/2102.10369","citing_paper":"/paper/2502.10490"},"observation_digest":"sha256:eebec375c7af2e11c0076f024c5252d18985e44f4998db021dc13451d0e1b8b4","observation_id":"c553e06f-76c0-42c9-87a2-eab7192e23e8","resolution":{"observed_at":"2026-08-07T19:18:21.952290Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T19:18:22.554606Z","title":"Invisible backdoor attack with sample-specific triggers,","venue":null,"work_id":"7c254fda-131c-4bea-91e7-91fe24f411a9","year":2021},"citing_paper":{"arxiv_id":"2502.10490","last_updated":"2025-02-14T13:15:13Z","snapshot_observed_at":"2026-08-07T19:10:57.274990Z","submitted_at":"2025-02-14T13:15:13Z","title":"A Robust Attack: Displacement Backdoor Attack","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-07T19:18:21.956150Z"},"links":{"citing_paper":"/paper/2502.10490"},"observation_digest":"sha256:f2851ea8bdff916af7deb300cbd62577cb76f0db99240c8eaeb2b8fa2a219b5a","observation_id":"7e80aaaf-beda-4ab2-92f2-dc3cfd933028","resolution":{"observed_at":"2026-08-07T19:18:22.559136Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T19:18:22.544089Z","title":"Lira: Learnable, imperceptible and robust backdoor attacks,","venue":null,"work_id":"caef57a0-4444-415a-a95d-90535b92ad77","year":2021},"citing_paper":{"arxiv_id":"2502.10490","last_updated":"2025-02-14T13:15:13Z","snapshot_observed_at":"2026-08-07T19:10:57.274990Z","submitted_at":"2025-02-14T13:15:13Z","title":"A Robust Attack: Displacement Backdoor Attack","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-07T19:18:21.959571Z"},"links":{"citing_paper":"/paper/2502.10490"},"observation_digest":"sha256:f73d408eb953a027da9475008f823d27a27eabaa9bd7a12c7cb8673f42de795c","observation_id":"ef797dc2-f74e-49f7-bfbd-b30ec77e9a41","resolution":{"observed_at":"2026-08-07T19:18:22.547295Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2212.09067","last_updated":"2022-12-18T11:30:59Z","snapshot_observed_at":"2026-08-05T17:14:24.121423Z","submitted_at":"2022-12-18T11:30:59Z","title":"Fine-Tuning Is All You Need to Mitigate Backdoor Attacks","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2212.09067","snapshot_observed_at":"2026-08-07T19:18:21.963182Z","title":"Fine- tuning is all you need to mitigate backdoor attacks,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2502.10490","last_updated":"2025-02-14T13:15:13Z","snapshot_observed_at":"2026-08-07T19:10:57.274990Z","submitted_at":"2025-02-14T13:15:13Z","title":"A Robust Attack: Displacement Backdoor Attack","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-07T19:18:21.963182Z"},"links":{"cited_paper":"/paper/2212.09067","citing_paper":"/paper/2502.10490"},"observation_digest":"sha256:fbdea94fafc037b0a614308284b0b06e28eef6daa1038f7c3a84af69c7bf53fa","observation_id":"dcafe3c7-f71e-4132-b019-fdb3f24b7db3","resolution":{"observed_at":"2026-08-07T19:18:21.963182Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T19:18:22.532480Z","title":"Few-shot backdoor defense using shapley estimation,","venue":null,"work_id":"47d22f5d-6c10-4bf1-a9cd-6e449df751a0","year":2022},"citing_paper":{"arxiv_id":"2502.10490","last_updated":"2025-02-14T13:15:13Z","snapshot_observed_at":"2026-08-07T19:10:57.274990Z","submitted_at":"2025-02-14T13:15:13Z","title":"A Robust Attack: Displacement Backdoor Attack","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-07T19:18:21.967090Z"},"links":{"citing_paper":"/paper/2502.10490"},"observation_digest":"sha256:0087e16baa6858c639974a1d405f2d2424740445399d607ff65aec597d5c1573","observation_id":"d46d5cac-6d4b-43d0-a631-46df93ac7368","resolution":{"observed_at":"2026-08-07T19:18:22.536399Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2002.12162","last_updated":"2025-03-26T03:12:17Z","snapshot_observed_at":"2026-07-06T09:00:37.960411Z","submitted_at":"2020-02-26T02:03:00Z","title":"Defending against Backdoor Attack on Deep Neural Networks","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2002.12162","snapshot_observed_at":"2026-08-07T19:18:21.970381Z","title":"Defending against back- door attack on deep neural networks,","venue":null,"work_id":null,"year":2002},"citing_paper":{"arxiv_id":"2502.10490","last_updated":"2025-02-14T13:15:13Z","snapshot_observed_at":"2026-08-07T19:10:57.274990Z","submitted_at":"2025-02-14T13:15:13Z","title":"A Robust Attack: Displacement Backdoor Attack","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-07T19:18:21.970381Z"},"links":{"cited_paper":"/paper/2002.12162","citing_paper":"/paper/2502.10490"},"observation_digest":"sha256:29379d57be0dc730845364a6aae2e9fc88db015d669ca8521c66b3880572c96a","observation_id":"3655fb3b-7cd1-4ec4-96f5-e9bf8b9d33f7","resolution":{"observed_at":"2026-08-07T19:18:21.970381Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T19:18:22.521118Z","title":"Fine-pruning: Defending against backdooring attacks on deep neural networks,","venue":null,"work_id":"3ab4a7be-1193-4beb-a576-70d15b4d0c44","year":2018},"citing_paper":{"arxiv_id":"2502.10490","last_updated":"2025-02-14T13:15:13Z","snapshot_observed_at":"2026-08-07T19:10:57.274990Z","submitted_at":"2025-02-14T13:15:13Z","title":"A Robust Attack: Displacement Backdoor Attack","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-07T19:18:21.975191Z"},"links":{"citing_paper":"/paper/2502.10490"},"observation_digest":"sha256:e82d1a7adb9809f564ae703ee26d57cec638a139172d222df024afaa7d88831b","observation_id":"947b2e74-8df1-4674-b2d0-34c5784b79a0","resolution":{"observed_at":"2026-08-07T19:18:22.525239Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2101.05930","last_updated":"2021-01-27T06:23:25Z","snapshot_observed_at":"2026-07-06T10:32:42.591643Z","submitted_at":"2021-01-15T01:35:22Z","title":"Neural Attention Distillation: Erasing Backdoor Triggers from Deep Neural Networks","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2101.05930","snapshot_observed_at":"2026-08-07T19:18:21.979217Z","title":"Neural attention distillation: Erasing backdoor triggers from deep neural networks,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2502.10490","last_updated":"2025-02-14T13:15:13Z","snapshot_observed_at":"2026-08-07T19:10:57.274990Z","submitted_at":"2025-02-14T13:15:13Z","title":"A Robust Attack: Displacement Backdoor Attack","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-07T19:18:21.979217Z"},"links":{"cited_paper":"/paper/2101.05930","citing_paper":"/paper/2502.10490"},"observation_digest":"sha256:33cff38a3bc96f3a48e0a5edf8734a81bc1920ac66fc9093642c079db36a8983","observation_id":"e8bbf724-6b09-4573-bb31-b90086f24b79","resolution":{"observed_at":"2026-08-07T19:18:21.979217Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T19:18:22.501876Z","title":"Disabling backdoor and identifying poison data by using knowledge distillation in backdoor attacks on deep neural networks,","venue":null,"work_id":"1d25a723-5978-4dea-8824-cfc934698ca1","year":2020},"citing_paper":{"arxiv_id":"2502.10490","last_updated":"2025-02-14T13:15:13Z","snapshot_observed_at":"2026-08-07T19:10:57.274990Z","submitted_at":"2025-02-14T13:15:13Z","title":"A Robust Attack: Displacement Backdoor Attack","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-07T19:18:21.983453Z"},"links":{"citing_paper":"/paper/2502.10490"},"observation_digest":"sha256:8919fb6ffb7c2d1bd3d900949edc8cfd9d99a57e9d9c8f360a675bb14d61b559","observation_id":"0a726bc9-2419-413c-aa7b-935b4fe4cc68","resolution":{"observed_at":"2026-08-07T19:18:22.513902Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T19:18:22.386066Z","title":"Anti-backdoor learning: Training clean models on poisoned data,","venue":null,"work_id":"a67dfe42-1931-460a-bc9b-b22f34fe18a8","year":2021},"citing_paper":{"arxiv_id":"2502.10490","last_updated":"2025-02-14T13:15:13Z","snapshot_observed_at":"2026-08-07T19:10:57.274990Z","submitted_at":"2025-02-14T13:15:13Z","title":"A Robust Attack: Displacement Backdoor Attack","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-07T19:18:21.987202Z"},"links":{"citing_paper":"/paper/2502.10490"},"observation_digest":"sha256:24a1aecf84f9b00a45a5d32c2644da5c36ef2fe38cb739f2da7c574750b12c1f","observation_id":"d085d6b0-aa54-45ff-9ecb-f362c011ae37","resolution":{"observed_at":"2026-08-07T19:18:22.435924Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T19:18:22.289804Z","title":"Deepsweep: An evaluation framework for mitigating dnn backdoor attacks using data augmentation,","venue":null,"work_id":"78fe0b94-96a5-43ab-9aa4-f1da38818c39","year":2021},"citing_paper":{"arxiv_id":"2502.10490","last_updated":"2025-02-14T13:15:13Z","snapshot_observed_at":"2026-08-07T19:10:57.274990Z","submitted_at":"2025-02-14T13:15:13Z","title":"A Robust Attack: Displacement Backdoor Attack","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-07T19:18:21.991356Z"},"links":{"citing_paper":"/paper/2502.10490"},"observation_digest":"sha256:23a16b3d3877f71a29c45ca78f5e72df6f8c790ebe731c5c234ec4493741ee11","observation_id":"62b205cc-d847-4340-bb7c-691e8ef6f64c","resolution":{"observed_at":"2026-08-07T19:18:22.324866Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T19:18:22.253065Z","title":"Strong data augmentation sani- tizes poisoning and backdoor attacks without an accuracy tradeoff,","venue":null,"work_id":"36a84e4d-29fe-49a8-93df-ac92328fda64","year":2021},"citing_paper":{"arxiv_id":"2502.10490","last_updated":"2025-02-14T13:15:13Z","snapshot_observed_at":"2026-08-07T19:10:57.274990Z","submitted_at":"2025-02-14T13:15:13Z","title":"A Robust Attack: Displacement Backdoor Attack","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-07T19:18:21.994904Z"},"links":{"citing_paper":"/paper/2502.10490"},"observation_digest":"sha256:85026f01af9f55ddf783de51ef1786094a6533b7e0fc8c88be9c6b363e24d93e","observation_id":"b7371ff2-56c1-47e9-bd05-24fb47a242da","resolution":{"observed_at":"2026-08-07T19:18:22.256680Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T19:18:22.242046Z","title":"Countermeasure against backdoor attack on neural networks utilizing knowledge distillation,","venue":null,"work_id":"b574e956-15db-4d05-83cc-fa896a527e0d","year":2020},"citing_paper":{"arxiv_id":"2502.10490","last_updated":"2025-02-14T13:15:13Z","snapshot_observed_at":"2026-08-07T19:10:57.274990Z","submitted_at":"2025-02-14T13:15:13Z","title":"A Robust Attack: Displacement Backdoor Attack","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-07T19:18:21.998243Z"},"links":{"citing_paper":"/paper/2502.10490"},"observation_digest":"sha256:7cc29955d77c373a1f7328904ca91f566580d5e4e144134de18430dd0eb8a72c","observation_id":"4f88ad73-b77f-4d07-a7c3-d1612a948afa","resolution":{"observed_at":"2026-08-07T19:18:22.245558Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T19:18:22.001967Z","title":"Input-aware dynamic backdoor attack,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2502.10490","last_updated":"2025-02-14T13:15:13Z","snapshot_observed_at":"2026-08-07T19:10:57.274990Z","submitted_at":"2025-02-14T13:15:13Z","title":"A Robust Attack: Displacement Backdoor Attack","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-07T19:18:22.001967Z"},"links":{"citing_paper":"/paper/2502.10490"},"observation_digest":"sha256:daf8558b56ba570d1b99969e99fd4271fdd44c73d52e9b3cce5a5eba2d6ae928","observation_id":"f2d7ebc2-01a2-4981-9be9-581997452699","resolution":{"observed_at":"2026-08-07T19:18:22.001967Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T19:18:22.225431Z","title":"Transferable clean-label poisoning attacks on deep neural nets,","venue":null,"work_id":"f3f6f117-3573-4783-ab89-d7f2c5cd2c14","year":2019},"citing_paper":{"arxiv_id":"2502.10490","last_updated":"2025-02-14T13:15:13Z","snapshot_observed_at":"2026-08-07T19:10:57.274990Z","submitted_at":"2025-02-14T13:15:13Z","title":"A Robust Attack: Displacement Backdoor Attack","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-07T19:18:22.005431Z"},"links":{"citing_paper":"/paper/2502.10490"},"observation_digest":"sha256:2977c9c428d2b67268182a38300484d22dba0f3333f33c072cdaa388a4a36c7e","observation_id":"a282a11a-c93b-4344-b256-26efa57b7905","resolution":{"observed_at":"2026-08-07T19:18:22.229456Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T19:18:22.214933Z","title":"Composite backdoor attack for deep neural network by mixing existing benign features,","venue":null,"work_id":"93c65092-8bd7-423a-908b-5ef0653ead7f","year":2020},"citing_paper":{"arxiv_id":"2502.10490","last_updated":"2025-02-14T13:15:13Z","snapshot_observed_at":"2026-08-07T19:10:57.274990Z","submitted_at":"2025-02-14T13:15:13Z","title":"A Robust Attack: Displacement Backdoor Attack","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-07T19:18:22.009049Z"},"links":{"citing_paper":"/paper/2502.10490"},"observation_digest":"sha256:7e7a4cdc27a5026fff1e1ec7e5114da37aa9ebe4b91b6142e7df2ff7c9b40926","observation_id":"3bbace70-05ec-43d6-af56-c3e9d94bf986","resolution":{"observed_at":"2026-08-07T19:18:22.218856Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1912.02771","last_updated":"2019-12-06T23:16:45Z","snapshot_observed_at":"2026-08-04T11:47:47.518305Z","submitted_at":"2019-12-05T18:05:59Z","title":"Label-Consistent Backdoor Attacks","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1912.02771","snapshot_observed_at":"2026-08-07T19:18:22.013079Z","title":"Label-consistent backdoor at- tacks,","venue":null,"work_id":null,"year":1912},"citing_paper":{"arxiv_id":"2502.10490","last_updated":"2025-02-14T13:15:13Z","snapshot_observed_at":"2026-08-07T19:10:57.274990Z","submitted_at":"2025-02-14T13:15:13Z","title":"A Robust Attack: Displacement Backdoor Attack","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-07T19:18:22.013079Z"},"links":{"cited_paper":"/paper/1912.02771","citing_paper":"/paper/2502.10490"},"observation_digest":"sha256:5ff0244c0cba96a24a03989e05e56f29a5fec5c35626dcbe170828dd541d843d","observation_id":"6549ef1b-3de3-442f-abb1-46b7b18557ad","resolution":{"observed_at":"2026-08-07T19:18:22.013079Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2304.11823","last_updated":"2023-04-24T05:13:52Z","snapshot_observed_at":"2026-07-06T15:19:08.624764Z","submitted_at":"2023-04-24T05:13:52Z","title":"Enhancing Fine-Tuning Based Backdoor Defense with Sharpness-Aware Minimization","version":1},"cited_work":{"arxiv_id":"2304.11823","doi":null,"metadata_source":"pith","pith_arxiv_id":"2304.11823","snapshot_observed_at":"2026-08-07T19:18:22.089160Z","title":"Enhancing Fine-Tuning Based Backdoor Defense with Sharpness-Aware Minimization","venue":"cs.AI","work_id":"d935a4d6-de22-469b-a75a-6c0d2ba62524","year":2023},"citing_paper":{"arxiv_id":"2502.10490","last_updated":"2025-02-14T13:15:13Z","snapshot_observed_at":"2026-08-07T19:10:57.274990Z","submitted_at":"2025-02-14T13:15:13Z","title":"A Robust Attack: Displacement Backdoor Attack","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-07T19:18:22.016855Z"},"links":{"cited_paper":"/paper/2304.11823","citing_paper":"/paper/2502.10490"},"observation_digest":"sha256:be3d5597bf44e211385bd57f7e008eb569792cbb21d6ede4d8771d302a38dab1","observation_id":"51316261-4efa-467d-92a0-92ca6a171f69","resolution":{"observed_at":"2026-08-07T19:18:22.095153Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1811.03728","last_updated":"2018-11-09T01:08:00Z","snapshot_observed_at":"2026-07-06T07:13:39.005894Z","submitted_at":"2018-11-09T01:08:00Z","title":"Detecting Backdoor Attacks on Deep Neural Networks by Activation Clustering","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1811.03728","snapshot_observed_at":"2026-08-07T19:18:22.020589Z","title":"Detecting backdoor attacks on deep neural networks by activation clustering,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2502.10490","last_updated":"2025-02-14T13:15:13Z","snapshot_observed_at":"2026-08-07T19:10:57.274990Z","submitted_at":"2025-02-14T13:15:13Z","title":"A Robust Attack: Displacement Backdoor Attack","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-07T19:18:22.020589Z"},"links":{"cited_paper":"/paper/1811.03728","citing_paper":"/paper/2502.10490"},"observation_digest":"sha256:da9e931486d96945766ca5d7957295a5f8d0a8126e7800538d74f2dd6bb2761e","observation_id":"8236daba-b921-4b0d-ac2a-4ea64485d286","resolution":{"observed_at":"2026-08-07T19:18:22.020589Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2005.00060","last_updated":"2020-07-03T03:49:28Z","snapshot_observed_at":"2026-07-06T09:16:43.105433Z","submitted_at":"2020-04-30T19:12:50Z","title":"Bridging Mode Connectivity in Loss Landscapes and Adversarial Robustness","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2005.00060","snapshot_observed_at":"2026-08-07T19:18:22.024058Z","title":"Bridging mode connectivity in loss landscapes and adversarial robustness,","venue":null,"work_id":null,"year":2005},"citing_paper":{"arxiv_id":"2502.10490","last_updated":"2025-02-14T13:15:13Z","snapshot_observed_at":"2026-08-07T19:10:57.274990Z","submitted_at":"2025-02-14T13:15:13Z","title":"A Robust Attack: Displacement Backdoor Attack","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-07T19:18:22.024058Z"},"links":{"cited_paper":"/paper/2005.00060","citing_paper":"/paper/2502.10490"},"observation_digest":"sha256:a1090607adeeac043589041a27d8d8e93b942ab02bde3c126c01e0ab287a7c37","observation_id":"2047894b-5335-4b4d-94c4-8f169aa05ad8","resolution":{"observed_at":"2026-08-07T19:18:22.024058Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T19:18:22.204740Z","title":"Deepinspect: A black-box trojan detection and mitigation framework for deep neural networks.,","venue":null,"work_id":"b4939395-9834-4c8a-9453-ab743ea7c986","year":2019},"citing_paper":{"arxiv_id":"2502.10490","last_updated":"2025-02-14T13:15:13Z","snapshot_observed_at":"2026-08-07T19:10:57.274990Z","submitted_at":"2025-02-14T13:15:13Z","title":"A Robust Attack: Displacement Backdoor Attack","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-07T19:18:22.027625Z"},"links":{"citing_paper":"/paper/2502.10490"},"observation_digest":"sha256:af124bf259060f0fda39df2ce0ad415eab93f30bcf380ede4d6d7c5a2a65b141","observation_id":"c4bcc39b-8512-4f60-8769-9a8a68a6bd7a","resolution":{"observed_at":"2026-08-07T19:18:22.208213Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T19:18:22.194213Z","title":"Neural cleanse: Identifying and mitigating backdoor attacks in neural networks,","venue":null,"work_id":"750145ea-b1e1-4c16-bde1-86aac631a506","year":2019},"citing_paper":{"arxiv_id":"2502.10490","last_updated":"2025-02-14T13:15:13Z","snapshot_observed_at":"2026-08-07T19:10:57.274990Z","submitted_at":"2025-02-14T13:15:13Z","title":"A Robust Attack: Displacement Backdoor Attack","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-07T19:18:22.031084Z"},"links":{"citing_paper":"/paper/2502.10490"},"observation_digest":"sha256:c1e48ab92067a7b9b0009f4ece213e5efd32b431f692e06c7e0a53d59b0ece45","observation_id":"60873667-f2d6-43ad-beb9-ead784420a0b","resolution":{"observed_at":"2026-08-07T19:18:22.198156Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T19:18:22.183078Z","title":"Defending neural backdoors via genera- tive distribution modeling,","venue":null,"work_id":"a0f3701e-73a5-4a5a-91d4-492b9c9f265a","year":2019},"citing_paper":{"arxiv_id":"2502.10490","last_updated":"2025-02-14T13:15:13Z","snapshot_observed_at":"2026-08-07T19:10:57.274990Z","submitted_at":"2025-02-14T13:15:13Z","title":"A Robust Attack: Displacement Backdoor Attack","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-07T19:18:22.034183Z"},"links":{"citing_paper":"/paper/2502.10490"},"observation_digest":"sha256:f4bbe13607125a9b37a9a192911e122b2da5174eac795ab26ab991f47c41618e","observation_id":"7a340985-d5fb-4515-8cb6-791bc9e4025a","resolution":{"observed_at":"2026-08-07T19:18:22.187369Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T19:18:22.172604Z","title":"Gangsweep: Sweep out neural backdoors by gan,","venue":null,"work_id":"b0f2586e-9fbe-4ef5-b994-c21dfdea388c","year":2020},"citing_paper":{"arxiv_id":"2502.10490","last_updated":"2025-02-14T13:15:13Z","snapshot_observed_at":"2026-08-07T19:10:57.274990Z","submitted_at":"2025-02-14T13:15:13Z","title":"A Robust Attack: Displacement Backdoor Attack","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-07T19:18:22.038522Z"},"links":{"citing_paper":"/paper/2502.10490"},"observation_digest":"sha256:bc91e0486aa916cc8cf799c8bfc715780343f4d6622a0fa87261f65ca22e0c8e","observation_id":"a9bc4efe-d224-4859-937a-bf1cb32c8dee","resolution":{"observed_at":"2026-08-07T19:18:22.176657Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T19:18:22.161906Z","title":"Practical detection of trojan neural networks: Data-limited and data-free cases,","venue":null,"work_id":"e4789349-60f2-4a38-b161-45bca6bb8087","year":2020},"citing_paper":{"arxiv_id":"2502.10490","last_updated":"2025-02-14T13:15:13Z","snapshot_observed_at":"2026-08-07T19:10:57.274990Z","submitted_at":"2025-02-14T13:15:13Z","title":"A Robust Attack: Displacement Backdoor Attack","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-07T19:18:22.042145Z"},"links":{"citing_paper":"/paper/2502.10490"},"observation_digest":"sha256:963f22612e64c59ea95d5bb17617eaf39f558f5ed9e9a677946e12f4a691b851","observation_id":"4a792ede-5d55-4826-8218-4c9abbbd50ec","resolution":{"observed_at":"2026-08-07T19:18:22.166060Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2502.10490","last_updated":"2025-02-14T13:15:13Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-07T19:10:57.274990Z","submitted_at":"2025-02-14T13:15:13Z","title":"A Robust Attack: Displacement Backdoor Attack"},"reference_resolution":{"displayed":36,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":10,"verified_exact":1,"verified_fuzzy":25},"total_outbound_references":36},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"thesis":"As of 9 August 2026, this Paper Citation Record lists 36 of 36 outbound references and 0 inbound Pith citation observations for arXiv:2502.10490."}