{"as_of":"2026-08-17T19:06:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:5135fbedecf78afa4faaa8363ee189bc5cc1db821d0750b39b5e8a7dcd8890cf","coverage":[{"denominator":68,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":68,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-16T12:40:53.477519Z","state":"measured"},{"denominator":68,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":68,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-17T06:30:58.91139+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2504.11990/citation-record","integrity":"/paper/2504.11990/integrity","json":"/paper/2504.11990/citation-record.json","paper":"/paper/2504.11990"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T12:40:54.285852Z","title":"Badnets: Evaluating backdooring attacks on deep neural networks,","venue":null,"work_id":"0bc19437-1255-4c1d-aac7-1431963262a8","year":2019},"citing_paper":{"arxiv_id":"2504.11990","last_updated":"2025-04-16T11:33:03Z","snapshot_observed_at":"2026-08-16T12:38:57.745348Z","submitted_at":"2025-04-16T11:33:03Z","title":"Secure Transfer Learning: Training Clean Models Against Backdoor in (Both) Pre-trained Encoders and Downstream Datasets","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-16T12:40:53.249119Z"},"links":{"citing_paper":"/paper/2504.11990"},"observation_digest":"sha256:6ebe1c9803c183f58540a51294bf4f3904bb893ddb1ff87e35739920ae04c160","observation_id":"68635449-04ab-4e17-96cf-81db51fd8dde","resolution":{"observed_at":"2026-08-16T12:40:54.289901Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1712.05526","last_updated":"2017-12-15T04:26:26Z","snapshot_observed_at":"2026-07-06T06:14:30.795326Z","submitted_at":"2017-12-15T04:26:26Z","title":"Targeted Backdoor Attacks on Deep Learning Systems Using Data Poisoning","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1712.05526","snapshot_observed_at":"2026-08-16T12:40:53.253964Z","title":"Targeted backdoor attacks on deep learning systems using data poisoning,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2504.11990","last_updated":"2025-04-16T11:33:03Z","snapshot_observed_at":"2026-08-16T12:38:57.745348Z","submitted_at":"2025-04-16T11:33:03Z","title":"Secure Transfer Learning: Training Clean Models Against Backdoor in (Both) Pre-trained Encoders and Downstream Datasets","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-16T12:40:53.253964Z"},"links":{"cited_paper":"/paper/1712.05526","citing_paper":"/paper/2504.11990"},"observation_digest":"sha256:cf98a9d21603f4feea523b8823f8ac41bb8700f629e6011d9bca0550f0d2741a","observation_id":"70989984-4f38-45e0-a58a-999c337fc2cc","resolution":{"observed_at":"2026-08-16T12:40:53.253964Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T12:40:54.275854Z","title":"Badclip: Dual-embedding guided backdoor attack on multimodal contrastive learning,","venue":null,"work_id":"d0383fe0-de20-46a9-8a75-d5622262138e","year":2024},"citing_paper":{"arxiv_id":"2504.11990","last_updated":"2025-04-16T11:33:03Z","snapshot_observed_at":"2026-08-16T12:38:57.745348Z","submitted_at":"2025-04-16T11:33:03Z","title":"Secure Transfer Learning: Training Clean Models Against Backdoor in (Both) Pre-trained Encoders and Downstream Datasets","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-16T12:40:53.258105Z"},"links":{"citing_paper":"/paper/2504.11990"},"observation_digest":"sha256:e7c408f3b0985d7674679fea6cee0e33fabd84fabf3258b7faebec0efd8f8029","observation_id":"aceb65e3-039b-4363-806e-a4757b93649e","resolution":{"observed_at":"2026-08-16T12:40:54.279609Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T12:40:54.265607Z","title":"BadEncoder: Backdoor Attacks to Pre-trained Encoders in Self-Supervised Learning,","venue":null,"work_id":"c941f7fc-f3bd-400f-917b-bc9f9f7ac6a9","year":2022},"citing_paper":{"arxiv_id":"2504.11990","last_updated":"2025-04-16T11:33:03Z","snapshot_observed_at":"2026-08-16T12:38:57.745348Z","submitted_at":"2025-04-16T11:33:03Z","title":"Secure Transfer Learning: Training Clean Models Against Backdoor in (Both) Pre-trained Encoders and Downstream Datasets","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-16T12:40:53.262168Z"},"links":{"citing_paper":"/paper/2504.11990"},"observation_digest":"sha256:2ce2dddf66dc6e7f36839bf7cd03e61a4547be8c7e97dbcca8b302df79d9ecea","observation_id":"e78cf9a1-97b7-4256-803a-26ea23f154cb","resolution":{"observed_at":"2026-08-16T12:40:54.269527Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T12:40:54.254631Z","title":"Backdoor Attacks Against Transfer Learning With Pre-Trained Deep Learning Models,","venue":null,"work_id":"6b3d1daa-9137-45f6-ab26-c7d6b6f565a8","year":2022},"citing_paper":{"arxiv_id":"2504.11990","last_updated":"2025-04-16T11:33:03Z","snapshot_observed_at":"2026-08-16T12:38:57.745348Z","submitted_at":"2025-04-16T11:33:03Z","title":"Secure Transfer Learning: Training Clean Models Against Backdoor in (Both) Pre-trained Encoders and Downstream Datasets","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-16T12:40:53.265612Z"},"links":{"citing_paper":"/paper/2504.11990"},"observation_digest":"sha256:560157da4da6c96dc1cbfb779b7119939bac64a6bbf6f70ba522b1f19a04e2b1","observation_id":"91eb603a-74bf-4e18-9703-d76d4204ad0b","resolution":{"observed_at":"2026-08-16T12:40:54.258404Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T12:40:54.244352Z","title":"An em- barrassingly simple backdoor attack on self-supervised learning,","venue":null,"work_id":"d2d5f28c-3bdc-4355-8dca-23f9671af726","year":2023},"citing_paper":{"arxiv_id":"2504.11990","last_updated":"2025-04-16T11:33:03Z","snapshot_observed_at":"2026-08-16T12:38:57.745348Z","submitted_at":"2025-04-16T11:33:03Z","title":"Secure Transfer Learning: Training Clean Models Against Backdoor in (Both) Pre-trained Encoders and Downstream Datasets","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-16T12:40:53.269477Z"},"links":{"citing_paper":"/paper/2504.11990"},"observation_digest":"sha256:272ed1f0b3626f3c257810457ee70884391d41af8800e503301a253a4ea34231","observation_id":"0b27a2ad-c8d1-44f4-a375-798332751a84","resolution":{"observed_at":"2026-08-16T12:40:54.248096Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T12:40:54.233808Z","title":"Dis- tribution Preserving Backdoor Attack in Self-supervised Learning,","venue":null,"work_id":"c59c2de8-c1d7-4585-b4e6-cb19d2f2c278","year":2024},"citing_paper":{"arxiv_id":"2504.11990","last_updated":"2025-04-16T11:33:03Z","snapshot_observed_at":"2026-08-16T12:38:57.745348Z","submitted_at":"2025-04-16T11:33:03Z","title":"Secure Transfer Learning: Training Clean Models Against Backdoor in (Both) Pre-trained Encoders and Downstream Datasets","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-16T12:40:53.273247Z"},"links":{"citing_paper":"/paper/2504.11990"},"observation_digest":"sha256:77b3163ca0bd85be254f403a75da5d8132c3ada2829883f761538de0c6d29a2c","observation_id":"76cc3693-40a2-447e-ad93-6edd5186904f","resolution":{"observed_at":"2026-08-16T12:40:54.237642Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T12:40:54.223769Z","title":"Back- door attacks on self-supervised learning,","venue":null,"work_id":"857981c7-e275-4a02-a660-d76f8aedae2e","year":2022},"citing_paper":{"arxiv_id":"2504.11990","last_updated":"2025-04-16T11:33:03Z","snapshot_observed_at":"2026-08-16T12:38:57.745348Z","submitted_at":"2025-04-16T11:33:03Z","title":"Secure Transfer Learning: Training Clean Models Against Backdoor in (Both) Pre-trained Encoders and Downstream Datasets","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-16T12:40:53.276461Z"},"links":{"citing_paper":"/paper/2504.11990"},"observation_digest":"sha256:1e37cc1589ed7174d464193408653c18afdc784bc82836e4b4c7d7169847fbec","observation_id":"c9061f37-3833-4b77-ae39-5bc50b00cb04","resolution":{"observed_at":"2026-08-16T12:40:54.227321Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T12:40:54.213701Z","title":"CorruptEncoder: Data poi- soning based backdoor attacks to contrastive learning,","venue":null,"work_id":"cbf18b66-180d-48a7-9bf0-2e1794970038","year":2024},"citing_paper":{"arxiv_id":"2504.11990","last_updated":"2025-04-16T11:33:03Z","snapshot_observed_at":"2026-08-16T12:38:57.745348Z","submitted_at":"2025-04-16T11:33:03Z","title":"Secure Transfer Learning: Training Clean Models Against Backdoor in (Both) Pre-trained Encoders and Downstream Datasets","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-16T12:40:53.279692Z"},"links":{"citing_paper":"/paper/2504.11990"},"observation_digest":"sha256:d35cfac94537f4bdbd9584d5fae6de3f1de0a63b8296c503b00daf8c8ce9d959","observation_id":"33fe8cc6-e2dd-45fd-a61e-86166ae33e12","resolution":{"observed_at":"2026-08-16T12:40:54.217288Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T12:40:54.202548Z","title":"A new backdoor attack in cnns by training set corruption without label poisoning,","venue":null,"work_id":"2f25a679-a9f1-48e9-baf6-1a3c0064e60f","year":2019},"citing_paper":{"arxiv_id":"2504.11990","last_updated":"2025-04-16T11:33:03Z","snapshot_observed_at":"2026-08-16T12:38:57.745348Z","submitted_at":"2025-04-16T11:33:03Z","title":"Secure Transfer Learning: Training Clean Models Against Backdoor in (Both) Pre-trained Encoders and Downstream Datasets","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-16T12:40:53.283592Z"},"links":{"citing_paper":"/paper/2504.11990"},"observation_digest":"sha256:6e4ebb763eca9168d6421e44ae215d3991658993d45b1bbe7a722ea40bb19f4b","observation_id":"d1ddf10a-7321-42f6-8e4a-d081a1080edc","resolution":{"observed_at":"2026-08-16T12:40:54.206406Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T12:40:54.192863Z","title":"Demon in the variant: Statistical analysis of DNNs for robust backdoor contamination de- tection,","venue":null,"work_id":"d4e331ab-0fe5-4ab2-ae31-3c47867289c7","year":2021},"citing_paper":{"arxiv_id":"2504.11990","last_updated":"2025-04-16T11:33:03Z","snapshot_observed_at":"2026-08-16T12:38:57.745348Z","submitted_at":"2025-04-16T11:33:03Z","title":"Secure Transfer Learning: Training Clean Models Against Backdoor in (Both) Pre-trained Encoders and Downstream Datasets","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-16T12:40:53.286884Z"},"links":{"citing_paper":"/paper/2504.11990"},"observation_digest":"sha256:e6d76ea12a82b4df0f9a69a2a11414c1db2f9da6d2677a50a7a3481885486f3e","observation_id":"9e89d05e-be81-48af-a29a-3ebf656b09c0","resolution":{"observed_at":"2026-08-16T12:40:54.196382Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T12:40:54.181355Z","title":"Revisiting the assumption of latent separability for backdoor defenses,","venue":null,"work_id":"d0519eb3-dbbc-4859-967c-12c334ae7754","year":2023},"citing_paper":{"arxiv_id":"2504.11990","last_updated":"2025-04-16T11:33:03Z","snapshot_observed_at":"2026-08-16T12:38:57.745348Z","submitted_at":"2025-04-16T11:33:03Z","title":"Secure Transfer Learning: Training Clean Models Against Backdoor in (Both) Pre-trained Encoders and Downstream Datasets","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-16T12:40:53.290126Z"},"links":{"citing_paper":"/paper/2504.11990"},"observation_digest":"sha256:0c0cc7142fde23343d89ee405f5645de73f7cb18a5dd0dd8ed944c31b1be29a9","observation_id":"d49f2884-af98-44bb-b071-fb95b7345876","resolution":{"observed_at":"2026-08-16T12:40:54.185307Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T12:40:54.169392Z","title":"WaNet - imperceptible warping- based backdoor attack,","venue":null,"work_id":"68ad152e-c150-4419-bb9e-cb4a13f70227","year":2021},"citing_paper":{"arxiv_id":"2504.11990","last_updated":"2025-04-16T11:33:03Z","snapshot_observed_at":"2026-08-16T12:38:57.745348Z","submitted_at":"2025-04-16T11:33:03Z","title":"Secure Transfer Learning: Training Clean Models Against Backdoor in (Both) Pre-trained Encoders and Downstream Datasets","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-16T12:40:53.293466Z"},"links":{"citing_paper":"/paper/2504.11990"},"observation_digest":"sha256:71d1385f1b82ab104c44fe3532e8e49fefcb01c6890dd5148f7407e35928d486","observation_id":"6122eaec-126d-40ca-9a3a-807e8afa59f3","resolution":{"observed_at":"2026-08-16T12:40:54.173973Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T12:40:54.159129Z","title":"Backdoor defense via deconfounded representation learning,","venue":null,"work_id":"cbee52fd-3c97-4f4f-ab61-dd9dfb74042e","year":2023},"citing_paper":{"arxiv_id":"2504.11990","last_updated":"2025-04-16T11:33:03Z","snapshot_observed_at":"2026-08-16T12:38:57.745348Z","submitted_at":"2025-04-16T11:33:03Z","title":"Secure Transfer Learning: Training Clean Models Against Backdoor in (Both) Pre-trained Encoders and Downstream Datasets","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-16T12:40:53.296721Z"},"links":{"citing_paper":"/paper/2504.11990"},"observation_digest":"sha256:1df0bd4ef157f81f1cb852cec01fef601ed125428105f8b7f4243028da20e771","observation_id":"8fef750f-88b5-4393-96c5-4c9b0a661564","resolution":{"observed_at":"2026-08-16T12:40:54.162641Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T12:40:54.149220Z","title":"Anti-Backdoor Learning: Training Clean Models on Poisoned Data,","venue":null,"work_id":"f6463511-2998-49d3-9aed-7a086f14e77c","year":2021},"citing_paper":{"arxiv_id":"2504.11990","last_updated":"2025-04-16T11:33:03Z","snapshot_observed_at":"2026-08-16T12:38:57.745348Z","submitted_at":"2025-04-16T11:33:03Z","title":"Secure Transfer Learning: Training Clean Models Against Backdoor in (Both) Pre-trained Encoders and Downstream Datasets","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-16T12:40:53.300334Z"},"links":{"citing_paper":"/paper/2504.11990"},"observation_digest":"sha256:fadfe702c6001109f49ab52175a3365d4710e0390466f5f6e48f6723bc9b4482","observation_id":"51c42ee2-e429-41d9-a461-fd4ac9a1106a","resolution":{"observed_at":"2026-08-16T12:40:54.152704Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T12:40:54.138750Z","title":"SPECTRE: defending against backdoor attacks using robust statistics,","venue":null,"work_id":"d287b1a6-a05b-41b5-b147-6900f0e22cc8","year":2021},"citing_paper":{"arxiv_id":"2504.11990","last_updated":"2025-04-16T11:33:03Z","snapshot_observed_at":"2026-08-16T12:38:57.745348Z","submitted_at":"2025-04-16T11:33:03Z","title":"Secure Transfer Learning: Training Clean Models Against Backdoor in (Both) Pre-trained Encoders and Downstream Datasets","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-16T12:40:53.304201Z"},"links":{"citing_paper":"/paper/2504.11990"},"observation_digest":"sha256:295b65d66ef54ccf32c80fc9b321633747c240b3916e5e0b40f32bf1f7bb2ef0","observation_id":"d28c41d8-e9be-47d3-aa87-fe0d7026a62d","resolution":{"observed_at":"2026-08-16T12:40:54.142561Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T12:40:54.128835Z","title":"Data-free backdoor re- moval based on channel lipschitzness,","venue":null,"work_id":"efd43978-b468-4aaf-8dde-31471c47ddc2","year":2022},"citing_paper":{"arxiv_id":"2504.11990","last_updated":"2025-04-16T11:33:03Z","snapshot_observed_at":"2026-08-16T12:38:57.745348Z","submitted_at":"2025-04-16T11:33:03Z","title":"Secure Transfer Learning: Training Clean Models Against Backdoor in (Both) Pre-trained Encoders and Downstream Datasets","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-16T12:40:53.307245Z"},"links":{"citing_paper":"/paper/2504.11990"},"observation_digest":"sha256:3b84513cb5e182df98ac3e49dd6cae763a79eb749d09a9b8871854083acc6e11","observation_id":"568a766d-9cfb-4561-832a-9e819ae9ec42","resolution":{"observed_at":"2026-08-16T12:40:54.132303Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1811.03728","last_updated":"2018-11-09T01:08:00Z","snapshot_observed_at":"2026-08-16T05:42:20.700873Z","submitted_at":"2018-11-09T01:08:00Z","title":"Detecting Backdoor Attacks on Deep Neural Networks by Activation Clustering","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1811.03728","snapshot_observed_at":"2026-08-16T12:40:53.310507Z","title":"Detecting backdoor attacks on deep neural networks by activation clustering,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2504.11990","last_updated":"2025-04-16T11:33:03Z","snapshot_observed_at":"2026-08-16T12:38:57.745348Z","submitted_at":"2025-04-16T11:33:03Z","title":"Secure Transfer Learning: Training Clean Models Against Backdoor in (Both) Pre-trained Encoders and Downstream Datasets","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-16T12:40:53.310507Z"},"links":{"cited_paper":"/paper/1811.03728","citing_paper":"/paper/2504.11990"},"observation_digest":"sha256:b0223e9165d8bd488db67778f1b1c360a76b98d6e9a667fa10e60021056ceab7","observation_id":"fcac6cfb-d47d-49ae-93aa-92aff80a3e4f","resolution":{"observed_at":"2026-08-16T12:40:53.310507Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T12:40:54.118941Z","title":"Spectral signatures in backdoor attacks,","venue":null,"work_id":"998f87dd-de86-4546-925d-1d5b1095bc91","year":2018},"citing_paper":{"arxiv_id":"2504.11990","last_updated":"2025-04-16T11:33:03Z","snapshot_observed_at":"2026-08-16T12:38:57.745348Z","submitted_at":"2025-04-16T11:33:03Z","title":"Secure Transfer Learning: Training Clean Models Against Backdoor in (Both) Pre-trained Encoders and Downstream Datasets","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-16T12:40:53.313959Z"},"links":{"citing_paper":"/paper/2504.11990"},"observation_digest":"sha256:47ae7b695717fb46364ddd2002cfd53f29949c8245fc2334b094596e2e56aba9","observation_id":"6f9fe05a-f0bd-4931-a0b9-c5d3987b58ac","resolution":{"observed_at":"2026-08-16T12:40:54.122175Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T12:40:54.109293Z","title":"ASSET: Robust back- door data detection across a multiplicity of deep learning paradigms,","venue":null,"work_id":"ea8c35ad-dbf5-4fad-852c-a8ec39a24cab","year":2023},"citing_paper":{"arxiv_id":"2504.11990","last_updated":"2025-04-16T11:33:03Z","snapshot_observed_at":"2026-08-16T12:38:57.745348Z","submitted_at":"2025-04-16T11:33:03Z","title":"Secure Transfer Learning: Training Clean Models Against Backdoor in (Both) Pre-trained Encoders and Downstream Datasets","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-16T12:40:53.317513Z"},"links":{"citing_paper":"/paper/2504.11990"},"observation_digest":"sha256:6b075ee0a1bb07a65a692a5f1c4dffbba6cd835c4f2019586dad2192eebc9cd7","observation_id":"26daba79-3c4d-4953-9d20-0884b2cae8b0","resolution":{"observed_at":"2026-08-16T12:40:54.112779Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T12:40:54.097856Z","title":"Towards a proactive ML approach for detecting backdoor poison samples,","venue":null,"work_id":"6b009efd-48e4-4791-b50a-2862c1808ab3","year":2023},"citing_paper":{"arxiv_id":"2504.11990","last_updated":"2025-04-16T11:33:03Z","snapshot_observed_at":"2026-08-16T12:38:57.745348Z","submitted_at":"2025-04-16T11:33:03Z","title":"Secure Transfer Learning: Training Clean Models Against Backdoor in (Both) Pre-trained Encoders and Downstream Datasets","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-16T12:40:53.320924Z"},"links":{"citing_paper":"/paper/2504.11990"},"observation_digest":"sha256:d7c28a1ae816a38dc3dd8fbc5e78a182e0a43993f93bb586acd6bb31cdbeadf0","observation_id":"faf7ce1a-8464-4c77-8af7-4066097ace43","resolution":{"observed_at":"2026-08-16T12:40:54.102456Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T12:40:54.087268Z","title":"STRIP: A defence against trojan attacks on deep neural networks,","venue":null,"work_id":"7e07863c-8808-48d1-ab05-23f46e39b29d","year":2019},"citing_paper":{"arxiv_id":"2504.11990","last_updated":"2025-04-16T11:33:03Z","snapshot_observed_at":"2026-08-16T12:38:57.745348Z","submitted_at":"2025-04-16T11:33:03Z","title":"Secure Transfer Learning: Training Clean Models Against Backdoor in (Both) Pre-trained Encoders and Downstream Datasets","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-16T12:40:53.324224Z"},"links":{"citing_paper":"/paper/2504.11990"},"observation_digest":"sha256:e11efa05181aded5867ea4ae401661004ea4504165be695bcc6af0da28a77b48","observation_id":"c3b0a8ad-3b2a-462e-b0b1-f02b5365a524","resolution":{"observed_at":"2026-08-16T12:40:54.091421Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T12:40:54.077092Z","title":"IBD-PSC: Input-level backdoor detection via parameter-oriented scaling consis- tency,","venue":null,"work_id":"ef9d4454-d115-41bb-983c-6b7601568545","year":2024},"citing_paper":{"arxiv_id":"2504.11990","last_updated":"2025-04-16T11:33:03Z","snapshot_observed_at":"2026-08-16T12:38:57.745348Z","submitted_at":"2025-04-16T11:33:03Z","title":"Secure Transfer Learning: Training Clean Models Against Backdoor in (Both) Pre-trained Encoders and Downstream Datasets","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-16T12:40:53.327457Z"},"links":{"citing_paper":"/paper/2504.11990"},"observation_digest":"sha256:ea6d7c8359d1c73673201eef2ea30e0ecfdae55a68acddef23f55cd1a42dfc09","observation_id":"b5d9ee6e-661b-438a-add7-f999d30d7f62","resolution":{"observed_at":"2026-08-16T12:40:54.080781Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T12:40:54.065631Z","title":"SCALE- UP: An efficient black-box input-level backdoor detection via ana- lyzing scaled prediction consistency,","venue":null,"work_id":"9dc0fb05-1885-44ff-8801-cd3fa844fecd","year":2023},"citing_paper":{"arxiv_id":"2504.11990","last_updated":"2025-04-16T11:33:03Z","snapshot_observed_at":"2026-08-16T12:38:57.745348Z","submitted_at":"2025-04-16T11:33:03Z","title":"Secure Transfer Learning: Training Clean Models Against Backdoor in (Both) Pre-trained Encoders and Downstream Datasets","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-16T12:40:53.331220Z"},"links":{"citing_paper":"/paper/2504.11990"},"observation_digest":"sha256:a9aba4ef72c8a5427994b94e230bd1dd960c84c4637d89c3f2ca509fbfcfdd1f","observation_id":"292f84cf-01bc-44f0-b05c-0895773e5488","resolution":{"observed_at":"2026-08-16T12:40:54.070068Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T12:40:54.056019Z","title":"Adversarial unlearning of backdoors via implicit hypergradient,","venue":null,"work_id":"ed1be377-d8d3-4f45-b0bd-96641655fde8","year":2022},"citing_paper":{"arxiv_id":"2504.11990","last_updated":"2025-04-16T11:33:03Z","snapshot_observed_at":"2026-08-16T12:38:57.745348Z","submitted_at":"2025-04-16T11:33:03Z","title":"Secure Transfer Learning: Training Clean Models Against Backdoor in (Both) Pre-trained Encoders and Downstream Datasets","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-16T12:40:53.334775Z"},"links":{"citing_paper":"/paper/2504.11990"},"observation_digest":"sha256:a901a6fcc86bdc20245470ae69e3ee105ace99c62d07d122f9ce1aee2d368fcd","observation_id":"005f85b3-926b-4e42-b22f-e5882aeb6d03","resolution":{"observed_at":"2026-08-16T12:40:54.059462Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T12:40:54.045842Z","title":"Enhancing fine-tuning based backdoor defense with sharpness-aware minimization,","venue":null,"work_id":"9f5f99c2-d8ad-459c-a5a5-a3609bdb4bdc","year":2023},"citing_paper":{"arxiv_id":"2504.11990","last_updated":"2025-04-16T11:33:03Z","snapshot_observed_at":"2026-08-16T12:38:57.745348Z","submitted_at":"2025-04-16T11:33:03Z","title":"Secure Transfer Learning: Training Clean Models Against Backdoor in (Both) Pre-trained Encoders and Downstream Datasets","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-16T12:40:53.338075Z"},"links":{"citing_paper":"/paper/2504.11990"},"observation_digest":"sha256:9fff065667945f3dc6e7fbb345daac4357da5b069b2e0d7b48f40fbf73ff7e64","observation_id":"f1d0884e-1e10-474a-9ca2-3d59867578a3","resolution":{"observed_at":"2026-08-16T12:40:54.049388Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T12:40:53.341433Z","title":"On the effectiveness of distil- lation in mitigating backdoors in pre-trained encoder,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2504.11990","last_updated":"2025-04-16T11:33:03Z","snapshot_observed_at":"2026-08-16T12:38:57.745348Z","submitted_at":"2025-04-16T11:33:03Z","title":"Secure Transfer Learning: Training Clean Models Against Backdoor in (Both) Pre-trained Encoders and Downstream Datasets","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-16T12:40:53.341433Z"},"links":{"citing_paper":"/paper/2504.11990"},"observation_digest":"sha256:75d1edcb3ec0bd22b1d36ce4f9228ac12fe9d92a76cf1eda58346bb77ed28aba","observation_id":"b60baa9f-7421-4e73-9019-3db945aca759","resolution":{"observed_at":"2026-08-16T12:40:53.341433Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T12:40:54.035719Z","title":"Februus: Input purification defense against trojan attacks on deep neural network systems,","venue":null,"work_id":"2dbb87f0-e2a2-4bf3-a9fc-5916a4695b9d","year":2020},"citing_paper":{"arxiv_id":"2504.11990","last_updated":"2025-04-16T11:33:03Z","snapshot_observed_at":"2026-08-16T12:38:57.745348Z","submitted_at":"2025-04-16T11:33:03Z","title":"Secure Transfer Learning: Training Clean Models Against Backdoor in (Both) Pre-trained Encoders and Downstream Datasets","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-16T12:40:53.344670Z"},"links":{"citing_paper":"/paper/2504.11990"},"observation_digest":"sha256:a1c6dd1ed84fae60d22e40f3f5371e5095a0ea05320e5c56facd5391b680fce2","observation_id":"8585adcf-07ba-48ce-b09b-8caa0c84295b","resolution":{"observed_at":"2026-08-16T12:40:54.039518Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2104.02361","last_updated":"2021-04-24T16:40:13Z","snapshot_observed_at":"2026-08-16T18:33:38.653124Z","submitted_at":"2021-04-06T08:37:33Z","title":"Backdoor Attack in the Physical World","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2104.02361","snapshot_observed_at":"2026-08-16T12:40:53.347964Z","title":"Backdoor attack in the physical world,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2504.11990","last_updated":"2025-04-16T11:33:03Z","snapshot_observed_at":"2026-08-16T12:38:57.745348Z","submitted_at":"2025-04-16T11:33:03Z","title":"Secure Transfer Learning: Training Clean Models Against Backdoor in (Both) Pre-trained Encoders and Downstream Datasets","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-16T12:40:53.347964Z"},"links":{"cited_paper":"/paper/2104.02361","citing_paper":"/paper/2504.11990"},"observation_digest":"sha256:019adf5d61dac2203ce1ee2494fc1dbed884c797790e15e1c8b12b64fe059b71","observation_id":"b77f6b12-9f8a-4f82-8ce2-93988134e579","resolution":{"observed_at":"2026-08-16T12:40:53.347964Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T12:40:54.026368Z","title":"Deepsweep: An evaluation framework for mitigating dnn back- door attacks using data augmentation,","venue":null,"work_id":"dba5e7d3-c94a-439d-a0b1-dc6addff1f8d","year":2021},"citing_paper":{"arxiv_id":"2504.11990","last_updated":"2025-04-16T11:33:03Z","snapshot_observed_at":"2026-08-16T12:38:57.745348Z","submitted_at":"2025-04-16T11:33:03Z","title":"Secure Transfer Learning: Training Clean Models Against Backdoor in (Both) Pre-trained Encoders and Downstream Datasets","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-16T12:40:53.351578Z"},"links":{"citing_paper":"/paper/2504.11990"},"observation_digest":"sha256:98c34d8f1e9d6dadbe42686ce4817083cb0a2f4fb7a57f105edbaae3ae982dc7","observation_id":"69403022-2436-4cf7-95b5-f157a4d9bff6","resolution":{"observed_at":"2026-08-16T12:40:54.029703Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T12:40:54.016602Z","title":"Detecting backdoors during the inference stage based on corruption robustness consistency,","venue":null,"work_id":"4cc6ee80-ea14-4c34-8acb-be255acc4b65","year":2023},"citing_paper":{"arxiv_id":"2504.11990","last_updated":"2025-04-16T11:33:03Z","snapshot_observed_at":"2026-08-16T12:38:57.745348Z","submitted_at":"2025-04-16T11:33:03Z","title":"Secure Transfer Learning: Training Clean Models Against Backdoor in (Both) Pre-trained Encoders and Downstream Datasets","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-16T12:40:53.355488Z"},"links":{"citing_paper":"/paper/2504.11990"},"observation_digest":"sha256:6a6c6fe07512b117b0b7b65599faa2b2e3548c36e3ca456c54ad96c15c7500b5","observation_id":"63f4fb9b-22d8-49aa-90a4-37edfd055b88","resolution":{"observed_at":"2026-08-16T12:40:54.020496Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T12:40:54.007256Z","title":"Robust backdoor detection for deep learning via topo- logical evolution dynamics,","venue":null,"work_id":"0ed75a31-068a-4461-8476-43290939f10b","year":2024},"citing_paper":{"arxiv_id":"2504.11990","last_updated":"2025-04-16T11:33:03Z","snapshot_observed_at":"2026-08-16T12:38:57.745348Z","submitted_at":"2025-04-16T11:33:03Z","title":"Secure Transfer Learning: Training Clean Models Against Backdoor in (Both) Pre-trained Encoders and Downstream Datasets","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-16T12:40:53.358944Z"},"links":{"citing_paper":"/paper/2504.11990"},"observation_digest":"sha256:8938b46ceccf62a25d065e83a6697dffff38353a3accef07f006d5c1fea2ae7e","observation_id":"1bd531b7-290c-4c4b-8030-8ff2b103d694","resolution":{"observed_at":"2026-08-16T12:40:54.010765Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T12:40:53.997711Z","title":"The ”Beat- rix","venue":null,"work_id":"ba95ed3f-e5ac-4e9e-97ab-ee8db6cd6b60","year":2023},"citing_paper":{"arxiv_id":"2504.11990","last_updated":"2025-04-16T11:33:03Z","snapshot_observed_at":"2026-08-16T12:38:57.745348Z","submitted_at":"2025-04-16T11:33:03Z","title":"Secure Transfer Learning: Training Clean Models Against Backdoor in (Both) Pre-trained Encoders and Downstream Datasets","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-16T12:40:53.362098Z"},"links":{"citing_paper":"/paper/2504.11990"},"observation_digest":"sha256:fb46217d3cbe63d29ea146d0723c72ecefa4430fb1df51bb6a49dd2aa86d1d4f","observation_id":"1ed9887e-4ce5-4dd0-b0f2-cb4d3301dfb3","resolution":{"observed_at":"2026-08-16T12:40:54.001113Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T12:40:53.987208Z","title":"Backdoor defense via decoupling the training process,","venue":null,"work_id":"0f4be0f5-201b-477a-bc4e-4c3f61c83fee","year":2022},"citing_paper":{"arxiv_id":"2504.11990","last_updated":"2025-04-16T11:33:03Z","snapshot_observed_at":"2026-08-16T12:38:57.745348Z","submitted_at":"2025-04-16T11:33:03Z","title":"Secure Transfer Learning: Training Clean Models Against Backdoor in (Both) Pre-trained Encoders and Downstream Datasets","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-16T12:40:53.365205Z"},"links":{"citing_paper":"/paper/2504.11990"},"observation_digest":"sha256:6e903aec855f8c9110d6e7f276bbe78155a5b392a937002dc0e2f0afe5f573dc","observation_id":"5d648af8-3a7b-4299-b710-85e409cbe695","resolution":{"observed_at":"2026-08-16T12:40:53.990992Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T12:40:53.976464Z","title":"Training with more confi- dence: Mitigating injected and natural backdoors during training,","venue":null,"work_id":"8076e2c6-03cd-4807-9540-0c53ce2a7466","year":2022},"citing_paper":{"arxiv_id":"2504.11990","last_updated":"2025-04-16T11:33:03Z","snapshot_observed_at":"2026-08-16T12:38:57.745348Z","submitted_at":"2025-04-16T11:33:03Z","title":"Secure Transfer Learning: Training Clean Models Against Backdoor in (Both) Pre-trained Encoders and Downstream Datasets","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-16T12:40:53.368345Z"},"links":{"citing_paper":"/paper/2504.11990"},"observation_digest":"sha256:96ae6cd699c47f96d67aff932310a55ae42d4637157c769e3223941d85fb3839","observation_id":"6cc559e9-ef90-4098-a3d6-662b34ce38db","resolution":{"observed_at":"2026-08-16T12:40:53.980285Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T12:40:53.965594Z","title":"Progressive poisoned data isolation for training-time backdoor defense,","venue":null,"work_id":"a5760c68-84c4-4b9d-81be-b150ef533b7f","year":2024},"citing_paper":{"arxiv_id":"2504.11990","last_updated":"2025-04-16T11:33:03Z","snapshot_observed_at":"2026-08-16T12:38:57.745348Z","submitted_at":"2025-04-16T11:33:03Z","title":"Secure Transfer Learning: Training Clean Models Against Backdoor in (Both) Pre-trained Encoders and Downstream Datasets","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-16T12:40:53.371746Z"},"links":{"citing_paper":"/paper/2504.11990"},"observation_digest":"sha256:a244511ac973634db6290dd5cb613a8f5f9c7640431bab7a51adda88a1ca5ef9","observation_id":"c06eaada-78e5-4dda-854e-168f18c535b1","resolution":{"observed_at":"2026-08-16T12:40:53.969320Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T12:40:53.954889Z","title":"Fine-Pruning: Defending against backdooring attacks on deep neural networks,","venue":null,"work_id":"fdeaf827-1c09-44d0-a041-69c165699316","year":2018},"citing_paper":{"arxiv_id":"2504.11990","last_updated":"2025-04-16T11:33:03Z","snapshot_observed_at":"2026-08-16T12:38:57.745348Z","submitted_at":"2025-04-16T11:33:03Z","title":"Secure Transfer Learning: Training Clean Models Against Backdoor in (Both) Pre-trained Encoders and Downstream Datasets","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-16T12:40:53.374770Z"},"links":{"citing_paper":"/paper/2504.11990"},"observation_digest":"sha256:3c1484ed44789c5031388fc70a2ab6c650550a1336cfea367aa850b4e5a0145d","observation_id":"fb6c4152-c906-4acc-9223-873fe7b52277","resolution":{"observed_at":"2026-08-16T12:40:53.958543Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T12:40:53.944263Z","title":"Towards inspecting and eliminating trojan backdoors in deep neural networks,","venue":null,"work_id":"2f072866-2c8d-4dac-870e-c09efa100042","year":2020},"citing_paper":{"arxiv_id":"2504.11990","last_updated":"2025-04-16T11:33:03Z","snapshot_observed_at":"2026-08-16T12:38:57.745348Z","submitted_at":"2025-04-16T11:33:03Z","title":"Secure Transfer Learning: Training Clean Models Against Backdoor in (Both) Pre-trained Encoders and Downstream Datasets","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-16T12:40:53.377921Z"},"links":{"citing_paper":"/paper/2504.11990"},"observation_digest":"sha256:30382f1dca8a423193a8d742703d964f69046da23294db4aeaf06da6665e2d54","observation_id":"e6aa3bc1-5e25-4517-9137-6b8a5050c78d","resolution":{"observed_at":"2026-08-16T12:40:53.947983Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T12:40:53.931748Z","title":"Backdoor scanning for deep neural networks through k- arm optimization,","venue":null,"work_id":"d5a76756-dd44-4aae-91f6-5147b1ae2ffb","year":2021},"citing_paper":{"arxiv_id":"2504.11990","last_updated":"2025-04-16T11:33:03Z","snapshot_observed_at":"2026-08-16T12:38:57.745348Z","submitted_at":"2025-04-16T11:33:03Z","title":"Secure Transfer Learning: Training Clean Models Against Backdoor in (Both) Pre-trained Encoders and Downstream Datasets","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-16T12:40:53.381077Z"},"links":{"citing_paper":"/paper/2504.11990"},"observation_digest":"sha256:257232cee721afa8d976df7613058e2abe2a2b4fb5c9f2971f8fdbd0cd740266","observation_id":"8fdd1634-f0d8-422d-bb91-10c7f9bc5190","resolution":{"observed_at":"2026-08-16T12:40:53.936765Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T12:40:53.919853Z","title":"Neural Cleanse: Identifying and mitigating backdoor attacks in neural networks,","venue":null,"work_id":"8734f517-3c67-4de2-95a7-32810773deda","year":2019},"citing_paper":{"arxiv_id":"2504.11990","last_updated":"2025-04-16T11:33:03Z","snapshot_observed_at":"2026-08-16T12:38:57.745348Z","submitted_at":"2025-04-16T11:33:03Z","title":"Secure Transfer Learning: Training Clean Models Against Backdoor in (Both) Pre-trained Encoders and Downstream Datasets","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-16T12:40:53.384185Z"},"links":{"citing_paper":"/paper/2504.11990"},"observation_digest":"sha256:9fec29d2891d133c1a245bb2cd825d9db7b29b13fb7f694b87c22a2d886aae66","observation_id":"20b47d64-1d63-47a0-bcee-8981dc82553a","resolution":{"observed_at":"2026-08-16T12:40:53.924019Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T12:40:53.910056Z","title":"Detecting backdoors in pre-trained encoders,","venue":null,"work_id":"4b962219-1cd4-429c-ae57-becbd8999597","year":2023},"citing_paper":{"arxiv_id":"2504.11990","last_updated":"2025-04-16T11:33:03Z","snapshot_observed_at":"2026-08-16T12:38:57.745348Z","submitted_at":"2025-04-16T11:33:03Z","title":"Secure Transfer Learning: Training Clean Models Against Backdoor in (Both) Pre-trained Encoders and Downstream Datasets","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-16T12:40:53.387396Z"},"links":{"citing_paper":"/paper/2504.11990"},"observation_digest":"sha256:61487474e70de1d07e468f140f2a4f914ce4efe2e2ada7b38a891038e9fb8304","observation_id":"1bcf2d21-5625-4786-8a87-4e7d6ff41d13","resolution":{"observed_at":"2026-08-16T12:40:53.913473Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T12:40:53.899228Z","title":"Backdoor defense via adaptively splitting poisoned dataset,","venue":null,"work_id":"9c171610-d945-4bb1-b068-1c90b245dde4","year":2023},"citing_paper":{"arxiv_id":"2504.11990","last_updated":"2025-04-16T11:33:03Z","snapshot_observed_at":"2026-08-16T12:38:57.745348Z","submitted_at":"2025-04-16T11:33:03Z","title":"Secure Transfer Learning: Training Clean Models Against Backdoor in (Both) Pre-trained Encoders and Downstream Datasets","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-16T12:40:53.391521Z"},"links":{"citing_paper":"/paper/2504.11990"},"observation_digest":"sha256:d930f21d465b6d5341310a19e476cad0994b27be6043039bb7ee94814e2cc849","observation_id":"d4ae4116-cb1d-4f4f-ae25-986a972e3e44","resolution":{"observed_at":"2026-08-16T12:40:53.902938Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T12:40:53.888348Z","title":"Model-agnostic meta-learning for fast adaptation of deep networks,","venue":null,"work_id":"ddb508f2-4695-4392-8b00-c3563e09b04c","year":2017},"citing_paper":{"arxiv_id":"2504.11990","last_updated":"2025-04-16T11:33:03Z","snapshot_observed_at":"2026-08-16T12:38:57.745348Z","submitted_at":"2025-04-16T11:33:03Z","title":"Secure Transfer Learning: Training Clean Models Against Backdoor in (Both) Pre-trained Encoders and Downstream Datasets","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-16T12:40:53.394730Z"},"links":{"citing_paper":"/paper/2504.11990"},"observation_digest":"sha256:8d39ef917dcf6c5bfa74e50957bb36da7180c54fb76d6073a1c16fdff6ba9c1f","observation_id":"e8df6a45-b4bf-4af2-94b8-e2a757191951","resolution":{"observed_at":"2026-08-16T12:40:53.892024Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T12:40:53.877790Z","title":"Learning multiple layers of features from tiny im- ages,","venue":null,"work_id":"001f39af-a55a-4496-b27c-3db0d0699571","year":2009},"citing_paper":{"arxiv_id":"2504.11990","last_updated":"2025-04-16T11:33:03Z","snapshot_observed_at":"2026-08-16T12:38:57.745348Z","submitted_at":"2025-04-16T11:33:03Z","title":"Secure Transfer Learning: Training Clean Models Against Backdoor in (Both) Pre-trained Encoders and Downstream Datasets","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-16T12:40:53.398065Z"},"links":{"citing_paper":"/paper/2504.11990"},"observation_digest":"sha256:0a534f4b994ff6d17287d1e31f191d1b69c9f0d2ca25e26754891ff8fef50fe2","observation_id":"cdb4d572-2682-4240-9a20-78c0145dbf02","resolution":{"observed_at":"2026-08-16T12:40:53.881650Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T12:40:53.401040Z","title":"Man vs. computer: Benchmarking machine learning algorithms for traffic sign recognition,","venue":null,"work_id":null,"year":2012},"citing_paper":{"arxiv_id":"2504.11990","last_updated":"2025-04-16T11:33:03Z","snapshot_observed_at":"2026-08-16T12:38:57.745348Z","submitted_at":"2025-04-16T11:33:03Z","title":"Secure Transfer Learning: Training Clean Models Against Backdoor in (Both) Pre-trained Encoders and Downstream Datasets","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-16T12:40:53.401040Z"},"links":{"citing_paper":"/paper/2504.11990"},"observation_digest":"sha256:662477eaefa94838eb9f42f26356b26662c3b31e873b2f7dce52f1160faeec66","observation_id":"922a3452-01d9-4d82-b984-64f6dc0158ee","resolution":{"observed_at":"2026-08-16T12:40:53.401040Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T12:40:53.404340Z","title":"Reading digits in natural images with unsupervised feature learning,","venue":null,"work_id":null,"year":2011},"citing_paper":{"arxiv_id":"2504.11990","last_updated":"2025-04-16T11:33:03Z","snapshot_observed_at":"2026-08-16T12:38:57.745348Z","submitted_at":"2025-04-16T11:33:03Z","title":"Secure Transfer Learning: Training Clean Models Against Backdoor in (Both) Pre-trained Encoders and Downstream Datasets","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-16T12:40:53.404340Z"},"links":{"citing_paper":"/paper/2504.11990"},"observation_digest":"sha256:66fb999f8b58dd44ccaac124699f37c9bf359c22e73071157bee1b6cf391a624","observation_id":"91341fa6-9000-4d59-9f1c-f0d81907ab5c","resolution":{"observed_at":"2026-08-16T12:40:53.404340Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T12:40:53.407580Z","title":"An analysis of single-layer networks in unsupervised feature learning,","venue":null,"work_id":null,"year":2011},"citing_paper":{"arxiv_id":"2504.11990","last_updated":"2025-04-16T11:33:03Z","snapshot_observed_at":"2026-08-16T12:38:57.745348Z","submitted_at":"2025-04-16T11:33:03Z","title":"Secure Transfer Learning: Training Clean Models Against Backdoor in (Both) Pre-trained Encoders and Downstream Datasets","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-16T12:40:53.407580Z"},"links":{"citing_paper":"/paper/2504.11990"},"observation_digest":"sha256:6c166d6d0a89435f8611e689407d1f8b77d5e327093d1494f3e3def3bf2d622f","observation_id":"5cb907d6-bca8-4d0c-81e7-637be07e8f91","resolution":{"observed_at":"2026-08-16T12:40:53.407580Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T12:40:53.848868Z","title":"ImageNet: A large-scale hierarchical image database,","venue":null,"work_id":"3243add5-53a3-4499-9783-27594be45acf","year":2009},"citing_paper":{"arxiv_id":"2504.11990","last_updated":"2025-04-16T11:33:03Z","snapshot_observed_at":"2026-08-16T12:38:57.745348Z","submitted_at":"2025-04-16T11:33:03Z","title":"Secure Transfer Learning: Training Clean Models Against Backdoor in (Both) Pre-trained Encoders and Downstream Datasets","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-16T12:40:53.410786Z"},"links":{"citing_paper":"/paper/2504.11990"},"observation_digest":"sha256:dcbed96bb13044a7d93afb52dd6dc9e2647da91786899ffd44a6f8599395e25a","observation_id":"7a62952f-d321-468f-b1e4-249f7c9373ad","resolution":{"observed_at":"2026-08-16T12:40:53.852621Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T12:40:53.839134Z","title":"META- SIFT : How to sift out a clean subset in the presence of data poi- soning?,","venue":null,"work_id":"1f3d7cd8-a568-4923-b0a3-387392a3ba32","year":2023},"citing_paper":{"arxiv_id":"2504.11990","last_updated":"2025-04-16T11:33:03Z","snapshot_observed_at":"2026-08-16T12:38:57.745348Z","submitted_at":"2025-04-16T11:33:03Z","title":"Secure Transfer Learning: Training Clean Models Against Backdoor in (Both) Pre-trained Encoders and Downstream Datasets","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-16T12:40:53.414046Z"},"links":{"citing_paper":"/paper/2504.11990"},"observation_digest":"sha256:524a08ba25eef9f53eb7ac3ad708b4466ca3277509fa3cff24f51ab6aec0b085","observation_id":"c7f94922-d6d6-4b43-a01b-ea0d58cdc926","resolution":{"observed_at":"2026-08-16T12:40:53.842824Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T12:40:53.417305Z","title":"Mutual information guided backdoor mitigation for pre- trained encoders,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2504.11990","last_updated":"2025-04-16T11:33:03Z","snapshot_observed_at":"2026-08-16T12:38:57.745348Z","submitted_at":"2025-04-16T11:33:03Z","title":"Secure Transfer Learning: Training Clean Models Against Backdoor in (Both) Pre-trained Encoders and Downstream Datasets","version":1},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-16T12:40:53.417305Z"},"links":{"citing_paper":"/paper/2504.11990"},"observation_digest":"sha256:d7a8cdaf73815dbbaee6091ce4c9b8bbc735a3bdafac06b34a287a5f5bf274b5","observation_id":"eb4982a6-35a3-49f9-bbe7-5a8c6ca2152d","resolution":{"observed_at":"2026-08-16T12:40:53.417305Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T12:40:53.828353Z","title":"Mitigat- ing Backdoor Attacks in Pre-Trained Encoders via Self-Supervised Knowledge Distillation ,","venue":null,"work_id":"a69b1e3b-318c-4f54-a39b-35240f757449","year":2024},"citing_paper":{"arxiv_id":"2504.11990","last_updated":"2025-04-16T11:33:03Z","snapshot_observed_at":"2026-08-16T12:38:57.745348Z","submitted_at":"2025-04-16T11:33:03Z","title":"Secure Transfer Learning: Training Clean Models Against Backdoor in (Both) Pre-trained Encoders and Downstream Datasets","version":1},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-16T12:40:53.420286Z"},"links":{"citing_paper":"/paper/2504.11990"},"observation_digest":"sha256:7b4ef4e85d9bc9edb91ea157bb71cc1147683c58885e847418df8c63cb6bddbe","observation_id":"232e69b9-447b-4dbb-b41c-97ab1120cf31","resolution":{"observed_at":"2026-08-16T12:40:53.832164Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T12:40:53.817401Z","title":"A density-based algorithm for discovering clusters in large spatial databases with noise,","venue":null,"work_id":"ed1112f1-e43e-4d4d-9d53-7b624105e1aa","year":1996},"citing_paper":{"arxiv_id":"2504.11990","last_updated":"2025-04-16T11:33:03Z","snapshot_observed_at":"2026-08-16T12:38:57.745348Z","submitted_at":"2025-04-16T11:33:03Z","title":"Secure Transfer Learning: Training Clean Models Against Backdoor in (Both) Pre-trained Encoders and Downstream Datasets","version":1},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-16T12:40:53.423735Z"},"links":{"citing_paper":"/paper/2504.11990"},"observation_digest":"sha256:639be5dab7815ed06f05b202b2c0363c09e895c6828f10c40e82d232e314dc28","observation_id":"c2223126-6225-4cab-9ffe-0e1ba0434a27","resolution":{"observed_at":"2026-08-16T12:40:53.822024Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T12:40:53.807236Z","title":null,"venue":null,"work_id":"60d19ae7-92f0-4eb7-9232-626138ae599a","year":null},"citing_paper":{"arxiv_id":"2504.11990","last_updated":"2025-04-16T11:33:03Z","snapshot_observed_at":"2026-08-16T12:38:57.745348Z","submitted_at":"2025-04-16T11:33:03Z","title":"Secure Transfer Learning: Training Clean Models Against Backdoor in (Both) Pre-trained Encoders and Downstream Datasets","version":1},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-16T12:40:53.427351Z"},"links":{"citing_paper":"/paper/2504.11990"},"observation_digest":"sha256:74bb827c5da8b4aa710e6174ece79786a9eecd77372fc370402df77fd5a3231e","observation_id":"7e1700f7-b9b9-41ee-af3c-40ff266ea193","resolution":{"observed_at":"2026-08-16T12:40:53.811194Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T12:40:53.797345Z","title":null,"venue":null,"work_id":"dd85dfda-b77a-4343-b0ad-8a17a41b8745","year":null},"citing_paper":{"arxiv_id":"2504.11990","last_updated":"2025-04-16T11:33:03Z","snapshot_observed_at":"2026-08-16T12:38:57.745348Z","submitted_at":"2025-04-16T11:33:03Z","title":"Secure Transfer Learning: Training Clean Models Against Backdoor in (Both) Pre-trained Encoders and Downstream Datasets","version":1},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-16T12:40:53.430448Z"},"links":{"citing_paper":"/paper/2504.11990"},"observation_digest":"sha256:2f0a035c3a09fac371a86172b51ebc860479715bc48e47ba4a49add287a1485e","observation_id":"f9845412-043b-4c7b-9873-da7914ad50ab","resolution":{"observed_at":"2026-08-16T12:40:53.800650Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T12:40:53.787628Z","title":null,"venue":null,"work_id":"43be4632-766c-49e5-add3-023829f69f6b","year":null},"citing_paper":{"arxiv_id":"2504.11990","last_updated":"2025-04-16T11:33:03Z","snapshot_observed_at":"2026-08-16T12:38:57.745348Z","submitted_at":"2025-04-16T11:33:03Z","title":"Secure Transfer Learning: Training Clean Models Against Backdoor in (Both) Pre-trained Encoders and Downstream Datasets","version":1},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-08-16T12:40:53.433848Z"},"links":{"citing_paper":"/paper/2504.11990"},"observation_digest":"sha256:66adbe33fa7765fda7e442a8de158faebf239e2026ad399ce311493e00c7bc9a","observation_id":"8d657224-5554-46ec-a515-d3acafb22fee","resolution":{"observed_at":"2026-08-16T12:40:53.790938Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T12:40:53.776730Z","title":null,"venue":null,"work_id":"71d7ec74-8bf5-4753-a54d-4f2c4fdc18b5","year":null},"citing_paper":{"arxiv_id":"2504.11990","last_updated":"2025-04-16T11:33:03Z","snapshot_observed_at":"2026-08-16T12:38:57.745348Z","submitted_at":"2025-04-16T11:33:03Z","title":"Secure Transfer Learning: Training Clean Models Against Backdoor in (Both) Pre-trained Encoders and Downstream Datasets","version":1},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-08-16T12:40:53.437349Z"},"links":{"citing_paper":"/paper/2504.11990"},"observation_digest":"sha256:a79b399fd348548792ac653acf066af522c8cd447c17f34d2dc4312bfc6b95fa","observation_id":"c776b8e1-c268-4d74-8b2f-126f57280d08","resolution":{"observed_at":"2026-08-16T12:40:53.780212Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T12:40:53.766928Z","title":null,"venue":null,"work_id":"bd3816c0-f166-4114-9de8-2ec5851f2ee6","year":null},"citing_paper":{"arxiv_id":"2504.11990","last_updated":"2025-04-16T11:33:03Z","snapshot_observed_at":"2026-08-16T12:38:57.745348Z","submitted_at":"2025-04-16T11:33:03Z","title":"Secure Transfer Learning: Training Clean Models Against Backdoor in (Both) Pre-trained Encoders and Downstream Datasets","version":1},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-08-16T12:40:53.440703Z"},"links":{"citing_paper":"/paper/2504.11990"},"observation_digest":"sha256:40719453ffe7c4c8cc2165c69731d26212f27e7bd7f9566831b3aa5bd7c1333f","observation_id":"0a7b7367-5408-41e2-94c5-4b3d37b1903e","resolution":{"observed_at":"2026-08-16T12:40:53.770157Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T12:40:53.756493Z","title":"Car” for STL-10, “Bird","venue":null,"work_id":"3731c678-77d5-4dfd-8d91-f28f43cf6fd0","year":null},"citing_paper":{"arxiv_id":"2504.11990","last_updated":"2025-04-16T11:33:03Z","snapshot_observed_at":"2026-08-16T12:38:57.745348Z","submitted_at":"2025-04-16T11:33:03Z","title":"Secure Transfer Learning: Training Clean Models Against Backdoor in (Both) Pre-trained Encoders and Downstream Datasets","version":1},"reference_index":58,"source":"pdf_text","source_observed_at":"2026-08-16T12:40:53.444096Z"},"links":{"citing_paper":"/paper/2504.11990"},"observation_digest":"sha256:0213b6274523cb4e616ee0e7ad47c6ccfb992b89d4e867a5356d7b0f99c10b49","observation_id":"11368442-f820-470f-9a3e-f3644469fec0","resolution":{"observed_at":"2026-08-16T12:40:53.759892Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T12:40:53.746449Z","title":null,"venue":null,"work_id":"899ac75e-ff05-4ec0-8814-0687e96e2a72","year":null},"citing_paper":{"arxiv_id":"2504.11990","last_updated":"2025-04-16T11:33:03Z","snapshot_observed_at":"2026-08-16T12:38:57.745348Z","submitted_at":"2025-04-16T11:33:03Z","title":"Secure Transfer Learning: Training Clean Models Against Backdoor in (Both) Pre-trained Encoders and Downstream Datasets","version":1},"reference_index":59,"source":"pdf_text","source_observed_at":"2026-08-16T12:40:53.447776Z"},"links":{"citing_paper":"/paper/2504.11990"},"observation_digest":"sha256:aa18545c39107ff686f88c4c3d349ccd9a16933fdae9422c4a490c5de66643c4","observation_id":"d5e12209-0a16-4c4c-9848-48893bd3daad","resolution":{"observed_at":"2026-08-16T12:40:53.749831Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T12:40:53.735193Z","title":null,"venue":null,"work_id":"1924f0f5-9347-467a-bab9-59b84cb51bfc","year":null},"citing_paper":{"arxiv_id":"2504.11990","last_updated":"2025-04-16T11:33:03Z","snapshot_observed_at":"2026-08-16T12:38:57.745348Z","submitted_at":"2025-04-16T11:33:03Z","title":"Secure Transfer Learning: Training Clean Models Against Backdoor in (Both) Pre-trained Encoders and Downstream Datasets","version":1},"reference_index":60,"source":"pdf_text","source_observed_at":"2026-08-16T12:40:53.451430Z"},"links":{"citing_paper":"/paper/2504.11990"},"observation_digest":"sha256:3baa60f34a099842dc120a4b6cafb5b155de829b463483c5e72c1562ad2bb9ea","observation_id":"6cc3a99c-304b-4111-87bf-e80ec6c83441","resolution":{"observed_at":"2026-08-16T12:40:53.738995Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T12:40:53.723202Z","title":null,"venue":null,"work_id":"4e1001f0-2ba5-428a-99d2-2ea41e9eadfc","year":null},"citing_paper":{"arxiv_id":"2504.11990","last_updated":"2025-04-16T11:33:03Z","snapshot_observed_at":"2026-08-16T12:38:57.745348Z","submitted_at":"2025-04-16T11:33:03Z","title":"Secure Transfer Learning: Training Clean Models Against Backdoor in (Both) Pre-trained Encoders and Downstream Datasets","version":1},"reference_index":61,"source":"pdf_text","source_observed_at":"2026-08-16T12:40:53.455023Z"},"links":{"citing_paper":"/paper/2504.11990"},"observation_digest":"sha256:43f84343be5186144ba005321fdd85677c53ad516b618e92241d844d3a59e0bd","observation_id":"cb0456cf-cbde-45f6-9f6c-43705c0bab3d","resolution":{"observed_at":"2026-08-16T12:40:53.727024Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T12:40:53.712026Z","title":null,"venue":null,"work_id":"40dbcf72-4653-494a-aada-0bab9740e9c5","year":null},"citing_paper":{"arxiv_id":"2504.11990","last_updated":"2025-04-16T11:33:03Z","snapshot_observed_at":"2026-08-16T12:38:57.745348Z","submitted_at":"2025-04-16T11:33:03Z","title":"Secure Transfer Learning: Training Clean Models Against Backdoor in (Both) Pre-trained Encoders and Downstream Datasets","version":1},"reference_index":62,"source":"pdf_text","source_observed_at":"2026-08-16T12:40:53.458121Z"},"links":{"citing_paper":"/paper/2504.11990"},"observation_digest":"sha256:baa102ed0194d51a1659663a1226a72f5299715cf13f8bbdfc89cb4fefa45a9c","observation_id":"7cd51c1e-19b3-40aa-b69e-019560479eda","resolution":{"observed_at":"2026-08-16T12:40:53.715750Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T12:40:53.700171Z","title":null,"venue":null,"work_id":"1523e30e-abe5-47db-8454-19b6b57a4797","year":null},"citing_paper":{"arxiv_id":"2504.11990","last_updated":"2025-04-16T11:33:03Z","snapshot_observed_at":"2026-08-16T12:38:57.745348Z","submitted_at":"2025-04-16T11:33:03Z","title":"Secure Transfer Learning: Training Clean Models Against Backdoor in (Both) Pre-trained Encoders and Downstream Datasets","version":1},"reference_index":63,"source":"pdf_text","source_observed_at":"2026-08-16T12:40:53.461284Z"},"links":{"citing_paper":"/paper/2504.11990"},"observation_digest":"sha256:185c04d31f0240db7ce0815a070731b49833360ff755b0538578a4ed93ea5966","observation_id":"96226c91-49f8-4119-97de-217ec8da5f13","resolution":{"observed_at":"2026-08-16T12:40:53.704198Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T12:40:53.688998Z","title":null,"venue":null,"work_id":"8617751e-5aca-4ed0-92fb-b9d07dd1d5d7","year":null},"citing_paper":{"arxiv_id":"2504.11990","last_updated":"2025-04-16T11:33:03Z","snapshot_observed_at":"2026-08-16T12:38:57.745348Z","submitted_at":"2025-04-16T11:33:03Z","title":"Secure Transfer Learning: Training Clean Models Against Backdoor in (Both) Pre-trained Encoders and Downstream Datasets","version":1},"reference_index":64,"source":"pdf_text","source_observed_at":"2026-08-16T12:40:53.464407Z"},"links":{"citing_paper":"/paper/2504.11990"},"observation_digest":"sha256:a2eed4ac7a6c9d3bb75f1d034d66a0c1c47e7dd8c73ffc119cf8d6f384aca0bb","observation_id":"6279a6fd-5bc2-4b57-ba6a-36daaae951e0","resolution":{"observed_at":"2026-08-16T12:40:53.692360Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T12:40:53.678525Z","title":null,"venue":null,"work_id":"e07fdf2c-3c8d-4c60-a61e-7bd4445e61a2","year":null},"citing_paper":{"arxiv_id":"2504.11990","last_updated":"2025-04-16T11:33:03Z","snapshot_observed_at":"2026-08-16T12:38:57.745348Z","submitted_at":"2025-04-16T11:33:03Z","title":"Secure Transfer Learning: Training Clean Models Against Backdoor in (Both) Pre-trained Encoders and Downstream Datasets","version":1},"reference_index":65,"source":"pdf_text","source_observed_at":"2026-08-16T12:40:53.467638Z"},"links":{"citing_paper":"/paper/2504.11990"},"observation_digest":"sha256:3bad5ba4b1a83a79f68913830bc5edca6e12ae1aa9913023f471c3a33129809f","observation_id":"a220722e-a162-4efa-8632-baaf5d1b3f50","resolution":{"observed_at":"2026-08-16T12:40:53.682029Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T12:40:53.666957Z","title":null,"venue":null,"work_id":"c18d3412-8995-45b7-8f7c-5e5cc4841c0d","year":null},"citing_paper":{"arxiv_id":"2504.11990","last_updated":"2025-04-16T11:33:03Z","snapshot_observed_at":"2026-08-16T12:38:57.745348Z","submitted_at":"2025-04-16T11:33:03Z","title":"Secure Transfer Learning: Training Clean Models Against Backdoor in (Both) Pre-trained Encoders and Downstream Datasets","version":1},"reference_index":66,"source":"pdf_text","source_observed_at":"2026-08-16T12:40:53.471275Z"},"links":{"citing_paper":"/paper/2504.11990"},"observation_digest":"sha256:4a0f1821a0bcb9e0dac4f6b12247ea4e3c000126cf6846714ed491b971a06c58","observation_id":"4fd3c065-ff6f-4d79-aa34-d2f5ced5807d","resolution":{"observed_at":"2026-08-16T12:40:53.671236Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T12:40:53.656118Z","title":null,"venue":null,"work_id":"9b10e255-3964-4913-aed2-cea6fb9951b6","year":null},"citing_paper":{"arxiv_id":"2504.11990","last_updated":"2025-04-16T11:33:03Z","snapshot_observed_at":"2026-08-16T12:38:57.745348Z","submitted_at":"2025-04-16T11:33:03Z","title":"Secure Transfer Learning: Training Clean Models Against Backdoor in (Both) Pre-trained Encoders and Downstream Datasets","version":1},"reference_index":67,"source":"pdf_text","source_observed_at":"2026-08-16T12:40:53.474296Z"},"links":{"citing_paper":"/paper/2504.11990"},"observation_digest":"sha256:06f497bf87868317d0e560ecb6a2463a24337f1e50f6d48986729f2bceff53a9","observation_id":"ecd759a6-d417-4e79-a692-e2b62b7d8f27","resolution":{"observed_at":"2026-08-16T12:40:53.659408Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T12:40:53.643509Z","title":null,"venue":null,"work_id":"ae6d8d05-0781-4eb6-a205-e30459409303","year":null},"citing_paper":{"arxiv_id":"2504.11990","last_updated":"2025-04-16T11:33:03Z","snapshot_observed_at":"2026-08-16T12:38:57.745348Z","submitted_at":"2025-04-16T11:33:03Z","title":"Secure Transfer Learning: Training Clean Models Against Backdoor in (Both) Pre-trained Encoders and Downstream Datasets","version":1},"reference_index":68,"source":"pdf_text","source_observed_at":"2026-08-16T12:40:53.477519Z"},"links":{"citing_paper":"/paper/2504.11990"},"observation_digest":"sha256:71e308d13b3b31868532d55b4a7ab13040b11f2218c5b984e2ae551eeb9ec6a2","observation_id":"bc1bbd1a-1a02-4bbf-acec-a7d56b2ec861","resolution":{"observed_at":"2026-08-16T12:40:53.648681Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2504.11990","last_updated":"2025-04-16T11:33:03Z","latest_version":1,"primary_category":"cs.LG","snapshot_observed_at":"2026-08-16T12:38:57.745348Z","submitted_at":"2025-04-16T11:33:03Z","title":"Secure Transfer Learning: Training Clean Models Against Backdoor in (Both) Pre-trained Encoders and Downstream Datasets"},"reference_resolution":{"displayed":68,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":23,"verified_exact":0,"verified_fuzzy":45},"total_outbound_references":68},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"thesis":"As of 17 August 2026, this Paper Citation Record lists 68 of 68 outbound references and 0 inbound Pith citation observations for arXiv:2504.11990."}