{"as_of":"2026-08-22T08:55:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:dbe39458501bc4ad47dea19f18b2951bdb2c00ddc4b70c478fa124292fe47791","coverage":[{"denominator":29,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":29,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-15T23:57:17.923899Z","state":"measured"},{"denominator":29,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":29,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-22T06:32:14.747728+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2505.03455/citation-record","integrity":"/paper/2505.03455/integrity","json":"/paper/2505.03455/citation-record.json","paper":"/paper/2505.03455"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.1145/3701985","metadata_source":"doi_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T23:57:17.965046Z","title":"Backdoor attacks against voice recognition systems: A survey,","venue":null,"work_id":"b45d749f-33b6-4192-927f-623a315de108","year":2024},"citing_paper":{"arxiv_id":"2505.03455","last_updated":"2025-05-06T11:52:12Z","snapshot_observed_at":"2026-08-16T15:59:21.029317Z","submitted_at":"2025-05-06T11:52:12Z","title":"Mitigating Backdoor Triggered and Targeted Data Poisoning Attacks in Voice Authentication Systems","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-15T23:57:17.820314Z"},"links":{"citing_paper":"/paper/2505.03455"},"observation_digest":"sha256:0b93f39c17a6473f45078c293a72276ffca26b8d21b1c0f7f042487f29fa21e3","observation_id":"e3ad7e57-c7c6-4596-a256-cdcb78af73f0","resolution":{"observed_at":"2026-08-15T23:57:17.968897Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T23:57:18.430153Z","title":"Defense method challenges against backdoor attacks in neural networks,","venue":null,"work_id":"473ac784-faf0-41c9-ab78-c701201989c7","year":2024},"citing_paper":{"arxiv_id":"2505.03455","last_updated":"2025-05-06T11:52:12Z","snapshot_observed_at":"2026-08-16T15:59:21.029317Z","submitted_at":"2025-05-06T11:52:12Z","title":"Mitigating Backdoor Triggered and Targeted Data Poisoning Attacks in Voice Authentication Systems","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-15T23:57:17.825338Z"},"links":{"citing_paper":"/paper/2505.03455"},"observation_digest":"sha256:509d60da45b362e99f6ed946772370c9bcb85b33aed5921b095480d190e62085","observation_id":"71a3a4b4-59d0-4611-94f9-620ad5915f56","resolution":{"observed_at":"2026-08-15T23:57:18.433833Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T23:57:18.418242Z","title":"Breaking security-critical voice authenti- cation,","venue":null,"work_id":"61549db2-1626-45f0-a6df-c7e85bb39db9","year":2023},"citing_paper":{"arxiv_id":"2505.03455","last_updated":"2025-05-06T11:52:12Z","snapshot_observed_at":"2026-08-16T15:59:21.029317Z","submitted_at":"2025-05-06T11:52:12Z","title":"Mitigating Backdoor Triggered and Targeted Data Poisoning Attacks in Voice Authentication Systems","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-15T23:57:17.829271Z"},"links":{"citing_paper":"/paper/2505.03455"},"observation_digest":"sha256:4ec8dab5bb9c9f34350152230408950a8237f5c6aa850902a3e876bff3940cec","observation_id":"cc8a9e86-02ac-4b04-af91-60920b8ea242","resolution":{"observed_at":"2026-08-15T23:57:18.421849Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2006.12557","last_updated":"2021-06-17T14:10:57Z","snapshot_observed_at":"2026-08-22T05:07:00.133717Z","submitted_at":"2020-06-22T18:34:08Z","title":"Just How Toxic is Data Poisoning? A Unified Benchmark for Backdoor and Data Poisoning Attacks","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2006.12557","snapshot_observed_at":"2026-08-15T23:57:17.832681Z","title":"Just how toxic is data poisoning? a unified benchmark for backdoor and data poisoning attacks,","venue":null,"work_id":null,"year":2006},"citing_paper":{"arxiv_id":"2505.03455","last_updated":"2025-05-06T11:52:12Z","snapshot_observed_at":"2026-08-16T15:59:21.029317Z","submitted_at":"2025-05-06T11:52:12Z","title":"Mitigating Backdoor Triggered and Targeted Data Poisoning Attacks in Voice Authentication Systems","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-15T23:57:17.832681Z"},"links":{"cited_paper":"/paper/2006.12557","citing_paper":"/paper/2505.03455"},"observation_digest":"sha256:8814b3869476147ebc7c1fd6c4a75c58000950abb44f2abd082aacb99b23d7e9","observation_id":"75a5bed3-5f74-4c04-9724-2af91925f0aa","resolution":{"observed_at":"2026-08-15T23:57:17.832681Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T23:57:18.395401Z","title":"Biometric backdoors: A poisoning attack against unsupervised template updating,","venue":null,"work_id":"9e922969-416d-44d8-845d-57023ef3ab76","year":2020},"citing_paper":{"arxiv_id":"2505.03455","last_updated":"2025-05-06T11:52:12Z","snapshot_observed_at":"2026-08-16T15:59:21.029317Z","submitted_at":"2025-05-06T11:52:12Z","title":"Mitigating Backdoor Triggered and Targeted Data Poisoning Attacks in Voice Authentication Systems","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-15T23:57:17.839964Z"},"links":{"citing_paper":"/paper/2505.03455"},"observation_digest":"sha256:c0c59023fa3c4153f338ddf938cbe71418cf9ab5844b9442ed8f372dc38312b5","observation_id":"4c4bb175-333c-47f7-8622-4ec2edf42298","resolution":{"observed_at":"2026-08-15T23:57:18.399389Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T23:57:18.383654Z","title":"Defend data poisoning attacks on voice authentication,","venue":null,"work_id":"2d9100cb-9e9b-44d9-93d5-d21eca9b496a","year":2023},"citing_paper":{"arxiv_id":"2505.03455","last_updated":"2025-05-06T11:52:12Z","snapshot_observed_at":"2026-08-16T15:59:21.029317Z","submitted_at":"2025-05-06T11:52:12Z","title":"Mitigating Backdoor Triggered and Targeted Data Poisoning Attacks in Voice Authentication Systems","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-15T23:57:17.843392Z"},"links":{"citing_paper":"/paper/2505.03455"},"observation_digest":"sha256:1adeb444d8e9bb45dad54b84b80f2a95ce7d2cd601956ee3bcf1d883e8fa9dc5","observation_id":"a604fc7e-3f1a-4d0c-b5ed-b32d6a83023b","resolution":{"observed_at":"2026-08-15T23:57:18.387478Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T23:57:18.372219Z","title":"A survey on data poisoning attacks and defenses,","venue":null,"work_id":"7de3276f-036a-4fbb-bbdf-f988eeec99f3","year":2022},"citing_paper":{"arxiv_id":"2505.03455","last_updated":"2025-05-06T11:52:12Z","snapshot_observed_at":"2026-08-16T15:59:21.029317Z","submitted_at":"2025-05-06T11:52:12Z","title":"Mitigating Backdoor Triggered and Targeted Data Poisoning Attacks in Voice Authentication Systems","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-15T23:57:17.846720Z"},"links":{"citing_paper":"/paper/2505.03455"},"observation_digest":"sha256:65ff877cba617a6227cc0f3bf532069f02c10b605c6bbe006315861ace5dca2e","observation_id":"1ff624ff-b947-4f26-83d6-f4ddcc111e48","resolution":{"observed_at":"2026-08-15T23:57:18.376233Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1802.03041","last_updated":"2018-02-08T20:34:19Z","snapshot_observed_at":"2026-08-15T10:16:05.312882Z","submitted_at":"2018-02-08T20:34:19Z","title":"Detection of Adversarial Training Examples in Poisoning Attacks through Anomaly Detection","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1802.03041","snapshot_observed_at":"2026-08-15T23:57:17.849959Z","title":"Detection of adversarial training examples in poisoning attacks through anomaly detection,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2505.03455","last_updated":"2025-05-06T11:52:12Z","snapshot_observed_at":"2026-08-16T15:59:21.029317Z","submitted_at":"2025-05-06T11:52:12Z","title":"Mitigating Backdoor Triggered and Targeted Data Poisoning Attacks in Voice Authentication Systems","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-15T23:57:17.849959Z"},"links":{"cited_paper":"/paper/1802.03041","citing_paper":"/paper/2505.03455"},"observation_digest":"sha256:595e9259222d321b6194c6fd7b7d45e27310df1c2dbfa05a4a91ff7b68c9a2f6","observation_id":"832bb087-3ff0-4dad-ab6c-da8012c4aa8a","resolution":{"observed_at":"2026-08-15T23:57:17.849959Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T23:57:18.360484Z","title":"Stealthy backdoor attack towards federated automatic speaker verification,","venue":null,"work_id":"6183ed07-9f4f-4c7f-aee9-665bce818e96","year":2024},"citing_paper":{"arxiv_id":"2505.03455","last_updated":"2025-05-06T11:52:12Z","snapshot_observed_at":"2026-08-16T15:59:21.029317Z","submitted_at":"2025-05-06T11:52:12Z","title":"Mitigating Backdoor Triggered and Targeted Data Poisoning Attacks in Voice Authentication Systems","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-15T23:57:17.853846Z"},"links":{"citing_paper":"/paper/2505.03455"},"observation_digest":"sha256:c649a3a6ce7fb0678ed594adf3b6d1f35c846b99896099172c4946ef4f0422c4","observation_id":"9321ebc6-db1d-46cb-b547-591770e361c8","resolution":{"observed_at":"2026-08-15T23:57:18.364811Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T23:57:17.857360Z","title":"Toward stealthy backdoor attacks against speech recognition via elements of sound,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.03455","last_updated":"2025-05-06T11:52:12Z","snapshot_observed_at":"2026-08-16T15:59:21.029317Z","submitted_at":"2025-05-06T11:52:12Z","title":"Mitigating Backdoor Triggered and Targeted Data Poisoning Attacks in Voice Authentication Systems","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-15T23:57:17.857360Z"},"links":{"citing_paper":"/paper/2505.03455"},"observation_digest":"sha256:d662541ee0588ba2596ff64192d3faf641dc2267c6dea771df2c498c1852ebec","observation_id":"3df0efbe-5f85-45ca-a595-650d635501d8","resolution":{"observed_at":"2026-08-15T23:57:17.857360Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T23:57:18.343219Z","title":"Fine-pruning: Defending against backdooring attacks on deep neural networks,","venue":null,"work_id":"40a52b8f-51d2-4744-b609-8cd0a4c84652","year":2018},"citing_paper":{"arxiv_id":"2505.03455","last_updated":"2025-05-06T11:52:12Z","snapshot_observed_at":"2026-08-16T15:59:21.029317Z","submitted_at":"2025-05-06T11:52:12Z","title":"Mitigating Backdoor Triggered and Targeted Data Poisoning Attacks in Voice Authentication Systems","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-15T23:57:17.860959Z"},"links":{"citing_paper":"/paper/2505.03455"},"observation_digest":"sha256:be8ed2da88697475bc02967b8d15e2d46c15e37c1c09080875828fbeeda35e62","observation_id":"c50a95a2-1d61-4c14-8ff1-379c6bed88a2","resolution":{"observed_at":"2026-08-15T23:57:18.346812Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T23:57:18.332866Z","title":"Neural trojans,","venue":null,"work_id":"198cd1dd-5879-4fdb-94c6-c961cca0bbd5","year":2017},"citing_paper":{"arxiv_id":"2505.03455","last_updated":"2025-05-06T11:52:12Z","snapshot_observed_at":"2026-08-16T15:59:21.029317Z","submitted_at":"2025-05-06T11:52:12Z","title":"Mitigating Backdoor Triggered and Targeted Data Poisoning Attacks in Voice Authentication Systems","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-15T23:57:17.864494Z"},"links":{"citing_paper":"/paper/2505.03455"},"observation_digest":"sha256:6088bc7bcfbb8e642606fe2d18f3e340293af8149acb6e64036ba49adc1c66fc","observation_id":"3e68d917-46cc-4c96-a9d1-1930cd4dcf08","resolution":{"observed_at":"2026-08-15T23:57:18.336400Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T23:57:18.323595Z","title":"Can you hear it?: Backdoor attacks via ultrasonic triggers,","venue":null,"work_id":"7b17a261-ced9-42ef-98af-d8ff39f209a2","year":2022},"citing_paper":{"arxiv_id":"2505.03455","last_updated":"2025-05-06T11:52:12Z","snapshot_observed_at":"2026-08-16T15:59:21.029317Z","submitted_at":"2025-05-06T11:52:12Z","title":"Mitigating Backdoor Triggered and Targeted Data Poisoning Attacks in Voice Authentication Systems","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-15T23:57:17.868120Z"},"links":{"citing_paper":"/paper/2505.03455"},"observation_digest":"sha256:0df165d7717f188f61c37c19c91ec52a1062bbeff4bb1e4d51406bb1f757d0e5","observation_id":"762aec3d-2c75-4747-b2e5-6e575d42c44a","resolution":{"observed_at":"2026-08-15T23:57:18.326841Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T23:57:18.313547Z","title":"Drinet: Dynamic backdoor attack against automatic speech recognization models,","venue":null,"work_id":"922261d1-b9ff-495b-ad08-579b80e90e1c","year":2022},"citing_paper":{"arxiv_id":"2505.03455","last_updated":"2025-05-06T11:52:12Z","snapshot_observed_at":"2026-08-16T15:59:21.029317Z","submitted_at":"2025-05-06T11:52:12Z","title":"Mitigating Backdoor Triggered and Targeted Data Poisoning Attacks in Voice Authentication Systems","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-15T23:57:17.871632Z"},"links":{"citing_paper":"/paper/2505.03455"},"observation_digest":"sha256:f2336867cd8402ba2c0b61c187fe3df3cb8c1fe3b2893f2f48051a160dc0b416","observation_id":"14e7ab58-7b0d-4ccc-9339-716619015b4d","resolution":{"observed_at":"2026-08-15T23:57:18.316923Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T23:57:18.302417Z","title":"Stealthy backdoor attack against speaker recognition using phase-injection hidden trigger,","venue":null,"work_id":"1d9954df-864d-4c75-bd2b-94f48e8c24a7","year":2023},"citing_paper":{"arxiv_id":"2505.03455","last_updated":"2025-05-06T11:52:12Z","snapshot_observed_at":"2026-08-16T15:59:21.029317Z","submitted_at":"2025-05-06T11:52:12Z","title":"Mitigating Backdoor Triggered and Targeted Data Poisoning Attacks in Voice Authentication Systems","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-15T23:57:17.875071Z"},"links":{"citing_paper":"/paper/2505.03455"},"observation_digest":"sha256:5d3c6505041b97f58b6f0177285cd045f4f0067900670c6de46458d6167ebc46","observation_id":"34deb9d2-1548-42a9-8418-1c2ff3fa744c","resolution":{"observed_at":"2026-08-15T23:57:18.306196Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T23:57:18.290642Z","title":"Enrollment- stage backdoor attacks on speaker recognition systems via adversarial ultrasound,","venue":null,"work_id":"c10fe2d7-d839-420c-adb9-c0182474b9ad","year":2024},"citing_paper":{"arxiv_id":"2505.03455","last_updated":"2025-05-06T11:52:12Z","snapshot_observed_at":"2026-08-16T15:59:21.029317Z","submitted_at":"2025-05-06T11:52:12Z","title":"Mitigating Backdoor Triggered and Targeted Data Poisoning Attacks in Voice Authentication Systems","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-15T23:57:17.878519Z"},"links":{"citing_paper":"/paper/2505.03455"},"observation_digest":"sha256:9a4a366e952b532bc047d3daa30c80f4f9916b58f7a73dd7ffb5ddb5665e49e4","observation_id":"a7af50c0-bbde-4404-b03e-fbafe053064a","resolution":{"observed_at":"2026-08-15T23:57:18.294829Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T23:57:18.277425Z","title":"Imperceptible rhythm backdoor attacks: Exploring rhythm transformation for embedding undetectable vulnerabilities on speech recognition,","venue":null,"work_id":"6bf5701d-dd42-41a1-880b-288963905f8f","year":2025},"citing_paper":{"arxiv_id":"2505.03455","last_updated":"2025-05-06T11:52:12Z","snapshot_observed_at":"2026-08-16T15:59:21.029317Z","submitted_at":"2025-05-06T11:52:12Z","title":"Mitigating Backdoor Triggered and Targeted Data Poisoning Attacks in Voice Authentication Systems","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-15T23:57:17.882237Z"},"links":{"citing_paper":"/paper/2505.03455"},"observation_digest":"sha256:dc92512cfa17ee55a4a9e8103beb2cb7aa5b0bfc3f6186da76a0b09dd5b25fc1","observation_id":"848aa4a6-8d68-431d-bdae-a7cbf0326fb1","resolution":{"observed_at":"2026-08-15T23:57:18.282442Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T23:57:18.265459Z","title":"Robust backdoor detection for deep learning via topological evolution dynamics,","venue":null,"work_id":"09726b31-63d1-4488-aa0e-3406206e846b","year":2024},"citing_paper":{"arxiv_id":"2505.03455","last_updated":"2025-05-06T11:52:12Z","snapshot_observed_at":"2026-08-16T15:59:21.029317Z","submitted_at":"2025-05-06T11:52:12Z","title":"Mitigating Backdoor Triggered and Targeted Data Poisoning Attacks in Voice Authentication Systems","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-15T23:57:17.885640Z"},"links":{"citing_paper":"/paper/2505.03455"},"observation_digest":"sha256:b3947edf98120a967e3a0b4aab8e3d0a63cd7bf32a16aa95a3fed69f8cdafd73","observation_id":"17c53570-7fa1-409d-9a38-6cbc2fc21e00","resolution":{"observed_at":"2026-08-15T23:57:18.269320Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T23:57:17.889452Z","title":"Audio-domain position-independent backdoor attack via unnoticeable triggers,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2505.03455","last_updated":"2025-05-06T11:52:12Z","snapshot_observed_at":"2026-08-16T15:59:21.029317Z","submitted_at":"2025-05-06T11:52:12Z","title":"Mitigating Backdoor Triggered and Targeted Data Poisoning Attacks in Voice Authentication Systems","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-15T23:57:17.889452Z"},"links":{"citing_paper":"/paper/2505.03455"},"observation_digest":"sha256:69bc16fa8d8e8febef5e068d0505a5ac267ec26d977994f008283c784d60f66c","observation_id":"b9046b3b-bf20-4059-ba7f-2364fe8fc513","resolution":{"observed_at":"2026-08-15T23:57:17.889452Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T23:57:17.892888Z","title":"Opportunistic backdoor attacks: Exploring human-imperceptible vulnerabilities on speech recognition systems,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2505.03455","last_updated":"2025-05-06T11:52:12Z","snapshot_observed_at":"2026-08-16T15:59:21.029317Z","submitted_at":"2025-05-06T11:52:12Z","title":"Mitigating Backdoor Triggered and Targeted Data Poisoning Attacks in Voice Authentication Systems","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-15T23:57:17.892888Z"},"links":{"citing_paper":"/paper/2505.03455"},"observation_digest":"sha256:c6b0df57b490f72a20aa3e80a23256798d5d70c8af58d269364dc1d09cdbfe49","observation_id":"d5df9959-3b55-49bf-9f75-00b25af34e71","resolution":{"observed_at":"2026-08-15T23:57:17.892888Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T23:57:18.253040Z","title":"Deep speaker: an end-to-end neural speaker embedding system,","venue":null,"work_id":"18b7c945-fc57-43f9-a641-2a9cf196526f","year":2017},"citing_paper":{"arxiv_id":"2505.03455","last_updated":"2025-05-06T11:52:12Z","snapshot_observed_at":"2026-08-16T15:59:21.029317Z","submitted_at":"2025-05-06T11:52:12Z","title":"Mitigating Backdoor Triggered and Targeted Data Poisoning Attacks in Voice Authentication Systems","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-15T23:57:17.896326Z"},"links":{"citing_paper":"/paper/2505.03455"},"observation_digest":"sha256:373974e4fa33adcece9ec0457ab4723fb110c52a9d4c3d174a7d7566ded3a232","observation_id":"45619dce-1829-4009-8bea-f0324d40cdcf","resolution":{"observed_at":"2026-08-15T23:57:18.257772Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T23:57:18.241092Z","title":"Convolutional neural networks for speech recognition,","venue":null,"work_id":"98e18e49-6fc9-4e56-ab3c-eaae76abe15f","year":2014},"citing_paper":{"arxiv_id":"2505.03455","last_updated":"2025-05-06T11:52:12Z","snapshot_observed_at":"2026-08-16T15:59:21.029317Z","submitted_at":"2025-05-06T11:52:12Z","title":"Mitigating Backdoor Triggered and Targeted Data Poisoning Attacks in Voice Authentication Systems","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-15T23:57:17.899879Z"},"links":{"citing_paper":"/paper/2505.03455"},"observation_digest":"sha256:95d46b90ddc67e3368b7193f96d92d8bca763db0e097ff16e81811a5902d9639","observation_id":"b32ac35c-f50d-414c-8abf-01c2c0763437","resolution":{"observed_at":"2026-08-15T23:57:18.245153Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.1145/3574159","metadata_source":"doi_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T23:57:17.950733Z","title":"Tutorial: Toward robust deep learning against poisoning attacks,","venue":null,"work_id":"a1c5ac75-21c1-44cd-9955-0a1ccfaba01a","year":2023},"citing_paper":{"arxiv_id":"2505.03455","last_updated":"2025-05-06T11:52:12Z","snapshot_observed_at":"2026-08-16T15:59:21.029317Z","submitted_at":"2025-05-06T11:52:12Z","title":"Mitigating Backdoor Triggered and Targeted Data Poisoning Attacks in Voice Authentication Systems","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-15T23:57:17.903454Z"},"links":{"citing_paper":"/paper/2505.03455"},"observation_digest":"sha256:91faafd90006f249a7049fd1fc28ed804a17ef0fce836d1dd65673eeeb74c40a","observation_id":"c4695df5-3528-4bf5-9c42-5eb6a0b287e4","resolution":{"observed_at":"2026-08-15T23:57:17.956944Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T23:57:18.229775Z","title":"Convolutional, long short-term memory, fully connected deep neural networks,","venue":null,"work_id":"c963db27-30d6-47b3-8846-2eed29bf66e8","year":2015},"citing_paper":{"arxiv_id":"2505.03455","last_updated":"2025-05-06T11:52:12Z","snapshot_observed_at":"2026-08-16T15:59:21.029317Z","submitted_at":"2025-05-06T11:52:12Z","title":"Mitigating Backdoor Triggered and Targeted Data Poisoning Attacks in Voice Authentication Systems","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-15T23:57:17.907237Z"},"links":{"citing_paper":"/paper/2505.03455"},"observation_digest":"sha256:f15a955b53dad49b76295561829f7ed33f158be75690cdc4a4935a994cbd3418","observation_id":"15ec48bd-382d-4161-9918-2f30a4ab751d","resolution":{"observed_at":"2026-08-15T23:57:18.233730Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2302.03251","last_updated":"2023-02-19T01:32:21Z","snapshot_observed_at":"2026-08-20T03:06:29.166238Z","submitted_at":"2023-02-07T04:33:41Z","title":"SCALE-UP: An Efficient Black-box Input-level Backdoor Detection via Analyzing Scaled Prediction Consistency","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2302.03251","snapshot_observed_at":"2026-08-15T23:57:17.911768Z","title":"Scale- up: An efficient black-box input-level backdoor detection via analyzing scaled prediction consistency,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.03455","last_updated":"2025-05-06T11:52:12Z","snapshot_observed_at":"2026-08-16T15:59:21.029317Z","submitted_at":"2025-05-06T11:52:12Z","title":"Mitigating Backdoor Triggered and Targeted Data Poisoning Attacks in Voice Authentication Systems","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-15T23:57:17.911768Z"},"links":{"cited_paper":"/paper/2302.03251","citing_paper":"/paper/2505.03455"},"observation_digest":"sha256:7e70251939e1a6ebe2520d6ccb5336b6f2ddf389f08b2d762f0e032dcd2dfdc2","observation_id":"21bcf146-336d-432f-b66e-b7fdeaf64e36","resolution":{"observed_at":"2026-08-15T23:57:17.911768Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T23:57:18.218700Z","title":"A manifold consistency interpolation method of poisoning attacks against semi- supervised model,","venue":null,"work_id":"adf5d70f-de81-41b8-ade8-76231585f432","year":null},"citing_paper":{"arxiv_id":"2505.03455","last_updated":"2025-05-06T11:52:12Z","snapshot_observed_at":"2026-08-16T15:59:21.029317Z","submitted_at":"2025-05-06T11:52:12Z","title":"Mitigating Backdoor Triggered and Targeted Data Poisoning Attacks in Voice Authentication Systems","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-15T23:57:17.916116Z"},"links":{"citing_paper":"/paper/2505.03455"},"observation_digest":"sha256:c1317ef720b85c773eacbd6a9dc73d53e811c10b0b34b3c7bbc21c2a11e359a8","observation_id":"642a1bdc-70ab-4d50-976b-81d940517e7e","resolution":{"observed_at":"2026-08-15T23:57:18.222404Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T23:57:18.207839Z","title":"UMD: Unsupervised model detection for X2X backdoor attacks,","venue":null,"work_id":"a5fce14c-e088-4ca6-9d04-e1674861efa2","year":2023},"citing_paper":{"arxiv_id":"2505.03455","last_updated":"2025-05-06T11:52:12Z","snapshot_observed_at":"2026-08-16T15:59:21.029317Z","submitted_at":"2025-05-06T11:52:12Z","title":"Mitigating Backdoor Triggered and Targeted Data Poisoning Attacks in Voice Authentication Systems","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-15T23:57:17.923899Z"},"links":{"citing_paper":"/paper/2505.03455"},"observation_digest":"sha256:6bf971ecbeca51438f204659809d98adc297ea37a92b98dd5b8c0fc3cfddacbe","observation_id":"dc12da5a-ef77-4241-a2ba-c79196a91501","resolution":{"observed_at":"2026-08-15T23:57:18.211190Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T23:57:18.406705Z","title":"Available: https://api.semanticscholar.org/CorpusID: 219980448","venue":null,"work_id":"1eff78e7-893a-4c07-a10a-5bd21cc15f73","year":null},"citing_paper":{"arxiv_id":"2505.03455","last_updated":"2025-05-06T11:52:12Z","snapshot_observed_at":"2026-08-16T15:59:21.029317Z","submitted_at":"2025-05-06T11:52:12Z","title":"Mitigating Backdoor Triggered and Targeted Data Poisoning Attacks in Voice Authentication Systems","version":1},"reference_index":2020,"source":"pdf_text","source_observed_at":"2026-08-15T23:57:17.836676Z"},"links":{"citing_paper":"/paper/2505.03455"},"observation_digest":"sha256:3450bdf0a8633663c689d97f2551c910685be1474282e1ecf67b3c48ae07858e","observation_id":"14dee414-3d0b-40ab-a2c4-a890378b4135","resolution":{"observed_at":"2026-08-15T23:57:18.410458Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T23:57:17.920366Z","title":"Available: https://doi.org/10.1109/TIFS.2023.3268882","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.03455","last_updated":"2025-05-06T11:52:12Z","snapshot_observed_at":"2026-08-16T15:59:21.029317Z","submitted_at":"2025-05-06T11:52:12Z","title":"Mitigating Backdoor Triggered and Targeted Data Poisoning Attacks in Voice Authentication Systems","version":1},"reference_index":2023,"source":"pdf_text","source_observed_at":"2026-08-15T23:57:17.920366Z"},"links":{"citing_paper":"/paper/2505.03455"},"observation_digest":"sha256:41bc2dd1bec9aa6fe448c68bb59e9b55ed7221bfbef372f1f69c03bd220c0479","observation_id":"b03c451c-86be-4eda-bc89-62cb6021c0e9","resolution":{"observed_at":"2026-08-15T23:57:17.920366Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2505.03455","last_updated":"2025-05-06T11:52:12Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-16T15:59:21.029317Z","submitted_at":"2025-05-06T11:52:12Z","title":"Mitigating Backdoor Triggered and Targeted Data Poisoning Attacks in Voice Authentication Systems"},"reference_resolution":{"displayed":29,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":7,"verified_exact":2,"verified_fuzzy":20},"total_outbound_references":29},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"thesis":"As of 22 August 2026, this Paper Citation Record lists 29 of 29 outbound references and 0 inbound Pith citation observations for arXiv:2505.03455."}