{"as_of":"2026-08-17T01:04:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:9cb93ff7589de3f5b4c56586d4ef6fe4594fa753e43f2fac7c578b28ea68d179","coverage":[{"denominator":63,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":63,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-15T22:26:18.041439Z","state":"measured"},{"denominator":66,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":66,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-16T06:30:59.297886+00:00","state":"measured"},{"denominator":3,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":3,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-15T16:15:52.239451Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-06-28T17:22:24.338572Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2505.08807","last_updated":"2025-05-12T02:04:57Z","snapshot_observed_at":"2026-08-15T22:20:56.452628Z","submitted_at":"2025-05-12T02:04:57Z","title":"Security of Internet of Agents: Attacks and Countermeasures","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.08807","snapshot_observed_at":"2026-08-15T16:15:52.239451Z","title":"Security of Internet of Agents: Attacks and Countermeasures,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2509.07131","last_updated":"2025-09-08T18:32:15Z","snapshot_observed_at":"2026-08-16T13:12:39.569402Z","submitted_at":"2025-09-08T18:32:15Z","title":"SoK: Security and Privacy of AI Agents for Blockchain","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-15T16:15:52.239451Z"},"links":{"cited_paper":"/paper/2505.08807","citing_paper":"/paper/2509.07131"},"observation_digest":"sha256:8860f0162ccec3bff9e2c1fcf1445281d5cfe5829b110cdec9afe974964e5be0","observation_id":"0ddd93f8-fd7b-4ef8-9891-6a16dcd8ebc4","resolution":{"observed_at":"2026-08-15T16:15:52.239451Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2505.08807","last_updated":"2025-05-12T02:04:57Z","snapshot_observed_at":"2026-08-15T22:20:56.452628Z","submitted_at":"2025-05-12T02:04:57Z","title":"Security of Internet of Agents: Attacks and Countermeasures","version":1},"cited_work":{"arxiv_id":"2505.08807","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2505.08807","snapshot_observed_at":"2026-06-28T17:22:24.338572Z","title":"Security of Internet of Agents: Attacks and Countermeasures,","venue":null,"work_id":"f1fb1f8c-e79a-4aaa-b618-30804c706434","year":2025},"citing_paper":{"arxiv_id":"2606.00962","last_updated":"2026-05-31T02:34:38Z","snapshot_observed_at":"2026-08-12T03:23:19.261748Z","submitted_at":"2026-05-31T02:34:38Z","title":"SS-ZKR: Spatial-Semantic Zero-Knowledge Routing for Privacy-Preserving Multi-Agent Collaboration","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-06-28T17:22:09.864332Z"},"links":{"cited_paper":"/paper/2505.08807","citing_paper":"/paper/2606.00962"},"observation_digest":"sha256:f054c4ca96337e311f5a7cf939691d12fc29254b71b2203dd7599c076c6e0da2","observation_id":"c8fc4eb5-7821-44f7-84fa-30581e25873e","resolution":{"observed_at":"2026-06-28T17:22:24.340278Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2505.08807","last_updated":"2025-05-12T02:04:57Z","snapshot_observed_at":"2026-08-15T22:20:56.452628Z","submitted_at":"2025-05-12T02:04:57Z","title":"Security of Internet of Agents: Attacks and Countermeasures","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.08807","snapshot_observed_at":"2026-08-15T14:21:42.578344Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.10530","last_updated":"2026-08-11T06:11:26Z","snapshot_observed_at":"2026-08-16T10:11:08.317968Z","submitted_at":"2026-08-11T06:11:26Z","title":"On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models","version":1},"reference_index":131,"source":"pdf_text","source_observed_at":"2026-08-15T14:21:42.578344Z"},"links":{"cited_paper":"/paper/2505.08807","citing_paper":"/paper/2608.10530"},"observation_digest":"sha256:75475e981af5a904bfcf06e4535a6ee3814b20f9f5e259fe5d8048e52ee555cd","observation_id":"bfd6ee91-3c22-42d3-b694-2d11617c768d","resolution":{"observed_at":"2026-08-15T14:21:42.578344Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2505.08807/citation-record","integrity":"/paper/2505.08807/integrity","json":"/paper/2505.08807/citation-record.json","paper":"/paper/2505.08807"},"outbound":[{"citation":{"cited_paper":{"arxiv_id":"2409.14457","last_updated":"2025-06-02T03:11:00Z","snapshot_observed_at":"2026-08-16T16:15:04.875110Z","submitted_at":"2024-09-22T14:09:49Z","title":"Large Model Based Agents: State-of-the-Art, Cooperation Paradigms, Security and Privacy, and Future Trends","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2409.14457","snapshot_observed_at":"2026-08-15T22:26:17.713566Z","title":"Large model agents: State-of-the-art, cooperation paradigms, security and privacy, and future trends,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.08807","last_updated":"2025-05-12T02:04:57Z","snapshot_observed_at":"2026-08-15T22:20:56.452628Z","submitted_at":"2025-05-12T02:04:57Z","title":"Security of Internet of Agents: Attacks and Countermeasures","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-15T22:26:17.713566Z"},"links":{"cited_paper":"/paper/2409.14457","citing_paper":"/paper/2505.08807"},"observation_digest":"sha256:562d8726fd5d425c676ac09d914a3b6766f6115934febf283a0ac94fae59c21e","observation_id":"fdcd0258-b81c-46c3-b553-5c385a1edaca","resolution":{"observed_at":"2026-08-15T22:26:17.713566Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:26:19.407176Z","title":"See and think: Embodied agent in virtual environment,","venue":null,"work_id":"89cf1d6e-340b-4c17-a038-8bc272ff27f7","year":2024},"citing_paper":{"arxiv_id":"2505.08807","last_updated":"2025-05-12T02:04:57Z","snapshot_observed_at":"2026-08-15T22:20:56.452628Z","submitted_at":"2025-05-12T02:04:57Z","title":"Security of Internet of Agents: Attacks and Countermeasures","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-15T22:26:17.719319Z"},"links":{"citing_paper":"/paper/2505.08807"},"observation_digest":"sha256:2ab814d30f955fc4a44d277806dd806f6306059c006d789b907f1084333497aa","observation_id":"e6047ec9-4b80-4493-8fc3-435a2a59c9c5","resolution":{"observed_at":"2026-08-15T22:26:19.412518Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:26:19.389514Z","title":"Intelligent agents in AI","venue":null,"work_id":"3f332063-b563-4554-9827-efb8582b4ab2","year":2023},"citing_paper":{"arxiv_id":"2505.08807","last_updated":"2025-05-12T02:04:57Z","snapshot_observed_at":"2026-08-15T22:20:56.452628Z","submitted_at":"2025-05-12T02:04:57Z","title":"Security of Internet of Agents: Attacks and Countermeasures","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-15T22:26:17.724647Z"},"links":{"citing_paper":"/paper/2505.08807"},"observation_digest":"sha256:5ce5eab4f836175e83c898c52248d2f33c3f5b70f9dae87d13c9fca981607c8b","observation_id":"eb8190cb-6042-4bb1-89e1-9b114397634a","resolution":{"observed_at":"2026-08-15T22:26:19.395470Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:26:19.371673Z","title":"Internet of agents: Weaving a web of heterogeneous agents for collaborative intelligence,","venue":null,"work_id":"5a2da69c-476a-4780-ae06-ab046647b56b","year":2025},"citing_paper":{"arxiv_id":"2505.08807","last_updated":"2025-05-12T02:04:57Z","snapshot_observed_at":"2026-08-15T22:20:56.452628Z","submitted_at":"2025-05-12T02:04:57Z","title":"Security of Internet of Agents: Attacks and Countermeasures","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-15T22:26:17.729912Z"},"links":{"citing_paper":"/paper/2505.08807"},"observation_digest":"sha256:9b48b38659d223a58a6c9c2c4fe776555a37599d4423c6a03d57d91515d9876a","observation_id":"ca0646e5-74d6-4d27-a303-5e669abe3330","resolution":{"observed_at":"2026-08-15T22:26:19.377651Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:26:19.354372Z","title":"DAWN: Designing distributed agents in a worldwide network,","venue":null,"work_id":"5073da0e-81dc-40eb-bbf4-8c8a10babec8","year":2024},"citing_paper":{"arxiv_id":"2505.08807","last_updated":"2025-05-12T02:04:57Z","snapshot_observed_at":"2026-08-15T22:20:56.452628Z","submitted_at":"2025-05-12T02:04:57Z","title":"Security of Internet of Agents: Attacks and Countermeasures","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-15T22:26:17.735157Z"},"links":{"citing_paper":"/paper/2505.08807"},"observation_digest":"sha256:8cfcd8c71018cfe45dadee80e01fcd298e42c2e2f3bcabad4ed401026304187b","observation_id":"b89b53ed-2ffc-496b-8876-34b3f645c65e","resolution":{"observed_at":"2026-08-15T22:26:19.359573Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:26:19.336819Z","title":"Can i hear your face? pervasive attack on voice authentication systems with a single face image,","venue":null,"work_id":"d592e2ec-53a2-49e8-aa34-880190f37bb9","year":2024},"citing_paper":{"arxiv_id":"2505.08807","last_updated":"2025-05-12T02:04:57Z","snapshot_observed_at":"2026-08-15T22:20:56.452628Z","submitted_at":"2025-05-12T02:04:57Z","title":"Security of Internet of Agents: Attacks and Countermeasures","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-15T22:26:17.741216Z"},"links":{"citing_paper":"/paper/2505.08807"},"observation_digest":"sha256:6d6fb3d99f612f04b987b665cd422f21b61fe793585469537a4c2931c6a687d7","observation_id":"605f3df0-2b98-466f-967a-1123a0d4a07c","resolution":{"observed_at":"2026-08-15T22:26:19.342576Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:26:19.318524Z","title":"CDA: Covert deception attacks in multi-agent resource scheduling,","venue":null,"work_id":"85fa3ee9-2d3b-4dd2-8b25-b0072478e3cd","year":2024},"citing_paper":{"arxiv_id":"2505.08807","last_updated":"2025-05-12T02:04:57Z","snapshot_observed_at":"2026-08-15T22:20:56.452628Z","submitted_at":"2025-05-12T02:04:57Z","title":"Security of Internet of Agents: Attacks and Countermeasures","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-15T22:26:17.746833Z"},"links":{"citing_paper":"/paper/2505.08807"},"observation_digest":"sha256:b669945f47ccc797bc34077e5f8f24c78445275497d41a3f22fd13d2abe9817d","observation_id":"e21d3643-2eef-41c6-a102-167d1c846cdf","resolution":{"observed_at":"2026-08-15T22:26:19.323504Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:26:19.301680Z","title":"Secret collusion among ai agents: Multi-agent deception via steganography,","venue":null,"work_id":"fa8905a2-6357-4d3f-9d6d-9201189d84cb","year":2024},"citing_paper":{"arxiv_id":"2505.08807","last_updated":"2025-05-12T02:04:57Z","snapshot_observed_at":"2026-08-15T22:20:56.452628Z","submitted_at":"2025-05-12T02:04:57Z","title":"Security of Internet of Agents: Attacks and Countermeasures","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-15T22:26:17.751298Z"},"links":{"citing_paper":"/paper/2505.08807"},"observation_digest":"sha256:8c0fd200bffe27758bcffcac76b718efd0484ab3c5fba924dc717f5edff1f595","observation_id":"35ae1140-865e-4927-92a3-7218df527be7","resolution":{"observed_at":"2026-08-15T22:26:19.307522Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:26:17.756146Z","title":"Agents under siege: Breaking pragmatic multi-agent llm systems with optimized prompt attacks,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2505.08807","last_updated":"2025-05-12T02:04:57Z","snapshot_observed_at":"2026-08-15T22:20:56.452628Z","submitted_at":"2025-05-12T02:04:57Z","title":"Security of Internet of Agents: Attacks and Countermeasures","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-15T22:26:17.756146Z"},"links":{"citing_paper":"/paper/2505.08807"},"observation_digest":"sha256:9dca236f88c2d68f267b30fc46044d2679df1243f3601ace50734764e8b0e174","observation_id":"60b0b658-9c66-4207-b462-44a26c140756","resolution":{"observed_at":"2026-08-15T22:26:17.756146Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:26:19.282837Z","title":"Can we trust embodied agents? exploring backdoor attacks against embodied LLM-based decision-making systems,","venue":null,"work_id":"c7ecfe2a-10a5-44ac-b328-ba7f74149976","year":2025},"citing_paper":{"arxiv_id":"2505.08807","last_updated":"2025-05-12T02:04:57Z","snapshot_observed_at":"2026-08-15T22:20:56.452628Z","submitted_at":"2025-05-12T02:04:57Z","title":"Security of Internet of Agents: Attacks and Countermeasures","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-15T22:26:17.760612Z"},"links":{"citing_paper":"/paper/2505.08807"},"observation_digest":"sha256:d2739c5ecf0e71f593045a96a158a2164a6f14ca68b5b40d953a4e673b2a1ff4","observation_id":"b1f799a2-535c-40dc-b897-d29b15a124a0","resolution":{"observed_at":"2026-08-15T22:26:19.289073Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:26:19.266464Z","title":"How language model hallucinations can snowball,","venue":null,"work_id":"1add794d-6d97-4ae1-a5ac-44513e9ae009","year":2024},"citing_paper":{"arxiv_id":"2505.08807","last_updated":"2025-05-12T02:04:57Z","snapshot_observed_at":"2026-08-15T22:20:56.452628Z","submitted_at":"2025-05-12T02:04:57Z","title":"Security of Internet of Agents: Attacks and Countermeasures","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-15T22:26:17.765343Z"},"links":{"citing_paper":"/paper/2505.08807"},"observation_digest":"sha256:aa3e771ebc6091c63af791cd217e620e69a5080cd2dd861f682fe52cb23553b1","observation_id":"5212c142-8ed6-465d-9ce3-3d9b4d5da438","resolution":{"observed_at":"2026-08-15T22:26:19.271407Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:26:19.249935Z","title":"Security and privacy challenges of large language models: A survey,","venue":null,"work_id":"93187b1b-e835-485a-8add-8e10092cce06","year":2025},"citing_paper":{"arxiv_id":"2505.08807","last_updated":"2025-05-12T02:04:57Z","snapshot_observed_at":"2026-08-15T22:20:56.452628Z","submitted_at":"2025-05-12T02:04:57Z","title":"Security of Internet of Agents: Attacks and Countermeasures","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-15T22:26:17.770453Z"},"links":{"citing_paper":"/paper/2505.08807"},"observation_digest":"sha256:a130e69815e001bc2cfbfccb3455941ad0c4bae801d5c5438005480bd7a5bf3c","observation_id":"f2104dc9-1df2-4efa-a60e-a3fff15154d2","resolution":{"observed_at":"2026-08-15T22:26:19.255074Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:26:17.775080Z","title":"The emerged security and privacy of llm agent: A survey with case studies,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.08807","last_updated":"2025-05-12T02:04:57Z","snapshot_observed_at":"2026-08-15T22:20:56.452628Z","submitted_at":"2025-05-12T02:04:57Z","title":"Security of Internet of Agents: Attacks and Countermeasures","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-15T22:26:17.775080Z"},"links":{"citing_paper":"/paper/2505.08807"},"observation_digest":"sha256:a443b860d4eb30a46eca1d2087a1cfb7bbaa9ff3379762cb23b35eea67948c2e","observation_id":"5482bc2d-3de2-42ae-b4ff-c85ae4ec1821","resolution":{"observed_at":"2026-08-15T22:26:17.775080Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:26:17.779695Z","title":"Unique security and privacy threats of large language model: A comprehensive survey,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.08807","last_updated":"2025-05-12T02:04:57Z","snapshot_observed_at":"2026-08-15T22:20:56.452628Z","submitted_at":"2025-05-12T02:04:57Z","title":"Security of Internet of Agents: Attacks and Countermeasures","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-15T22:26:17.779695Z"},"links":{"citing_paper":"/paper/2505.08807"},"observation_digest":"sha256:f6ba67be8ce2082a62c4e16c5cfeba818b2775054411b60163063a9609f416ab","observation_id":"5b580b52-bdf1-4f7f-ad27-c08349aa4d42","resolution":{"observed_at":"2026-08-15T22:26:17.779695Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2411.09523","last_updated":"2024-11-14T15:40:04Z","snapshot_observed_at":"2026-08-16T08:51:53.508656Z","submitted_at":"2024-11-14T15:40:04Z","title":"Navigating the Risks: A Survey of Security, Privacy, and Ethics Threats in LLM-Based Agents","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2411.09523","snapshot_observed_at":"2026-08-15T22:26:17.785376Z","title":"Navigating the risks: A survey of security, privacy, and ethics threats in llm-based agents,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.08807","last_updated":"2025-05-12T02:04:57Z","snapshot_observed_at":"2026-08-15T22:20:56.452628Z","submitted_at":"2025-05-12T02:04:57Z","title":"Security of Internet of Agents: Attacks and Countermeasures","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-15T22:26:17.785376Z"},"links":{"cited_paper":"/paper/2411.09523","citing_paper":"/paper/2505.08807"},"observation_digest":"sha256:b9136be4b0b3c403b4f8cd7b8a040399edf1e3820da4be594aaafd869206ac83","observation_id":"5fa82a77-9301-4e6f-82ce-9943efec5e73","resolution":{"observed_at":"2026-08-15T22:26:17.785376Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2401.05459","last_updated":"2024-05-08T06:16:23Z","snapshot_observed_at":"2026-08-02T13:57:57.119489Z","submitted_at":"2024-01-10T09:25:45Z","title":"Personal LLM Agents: Insights and Survey about the Capability, Efficiency and Security","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2401.05459","snapshot_observed_at":"2026-08-15T22:26:17.790503Z","title":"Personal LLM agents: Insights and survey about the capability, efficiency and security,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.08807","last_updated":"2025-05-12T02:04:57Z","snapshot_observed_at":"2026-08-15T22:20:56.452628Z","submitted_at":"2025-05-12T02:04:57Z","title":"Security of Internet of Agents: Attacks and Countermeasures","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-15T22:26:17.790503Z"},"links":{"cited_paper":"/paper/2401.05459","citing_paper":"/paper/2505.08807"},"observation_digest":"sha256:1baf0b76117b136a8fc3a1dc7794656398d211148bde64f49a783a561f48af67","observation_id":"d2232451-174e-43f6-b809-d88ecac6b2a8","resolution":{"observed_at":"2026-08-15T22:26:17.790503Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:26:17.795664Z","title":"Physical safety and cyber security analysis of multi-agent systems: A survey of recent advances,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2505.08807","last_updated":"2025-05-12T02:04:57Z","snapshot_observed_at":"2026-08-15T22:20:56.452628Z","submitted_at":"2025-05-12T02:04:57Z","title":"Security of Internet of Agents: Attacks and Countermeasures","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-15T22:26:17.795664Z"},"links":{"citing_paper":"/paper/2505.08807"},"observation_digest":"sha256:884369c32e094e25f8ab8f310ac65fea32e8e6d3959e76f0a4de339bee889d29","observation_id":"c6bc7041-b96a-4232-bc0f-7a0b3c4f3e9e","resolution":{"observed_at":"2026-08-15T22:26:17.795664Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:26:19.223066Z","title":"AI agents under threat: A survey of key security challenges and future pathways,","venue":null,"work_id":"127e7cd8-7fd7-45ef-a5dd-ddd4f3a787f9","year":2025},"citing_paper":{"arxiv_id":"2505.08807","last_updated":"2025-05-12T02:04:57Z","snapshot_observed_at":"2026-08-15T22:20:56.452628Z","submitted_at":"2025-05-12T02:04:57Z","title":"Security of Internet of Agents: Attacks and Countermeasures","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-15T22:26:17.799882Z"},"links":{"citing_paper":"/paper/2505.08807"},"observation_digest":"sha256:78c2d85166d1b8d4d84659683ce0f82addf4984a3b653b3e23064d98c26f39a7","observation_id":"f0e1f332-6c00-4853-a0ba-47352aea79ca","resolution":{"observed_at":"2026-08-15T22:26:19.228177Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2504.15585","last_updated":"2025-06-09T02:36:20Z","snapshot_observed_at":"2026-08-16T13:11:23.928524Z","submitted_at":"2025-04-22T05:02:49Z","title":"A Comprehensive Survey in LLM(-Agent) Full Stack Safety: Data, Training and Deployment","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.15585","snapshot_observed_at":"2026-08-15T22:26:17.804206Z","title":"A comprehensive survey in LLM (- agent) full stack safety: Data, training and deployment,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2505.08807","last_updated":"2025-05-12T02:04:57Z","snapshot_observed_at":"2026-08-15T22:20:56.452628Z","submitted_at":"2025-05-12T02:04:57Z","title":"Security of Internet of Agents: Attacks and Countermeasures","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-15T22:26:17.804206Z"},"links":{"cited_paper":"/paper/2504.15585","citing_paper":"/paper/2505.08807"},"observation_digest":"sha256:7d34974b56b739c20bf911ae1db9cb4aa154db69742c9099d6d44445f7f8d092","observation_id":"bdd39ed5-f9f4-4d77-9fc2-698c8d02679e","resolution":{"observed_at":"2026-08-15T22:26:17.804206Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:26:19.205461Z","title":"From persona to personalization: A survey on role-playing language agents,","venue":null,"work_id":"7d01e492-13ab-49f1-ad6d-b86c7cb00dea","year":2024},"citing_paper":{"arxiv_id":"2505.08807","last_updated":"2025-05-12T02:04:57Z","snapshot_observed_at":"2026-08-15T22:20:56.452628Z","submitted_at":"2025-05-12T02:04:57Z","title":"Security of Internet of Agents: Attacks and Countermeasures","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-15T22:26:17.809062Z"},"links":{"citing_paper":"/paper/2505.08807"},"observation_digest":"sha256:c5bb281a7d08b04552f7a602c88e45db014fea8697c8ca45461f3b6e8041daf9","observation_id":"0579e6d4-a2de-4d40-9a49-761cbcd72e7a","resolution":{"observed_at":"2026-08-15T22:26:19.210691Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:26:19.187622Z","title":"Model context protocol (MCP)","venue":null,"work_id":"3d143600-ee35-40b3-85e0-d8bb4ea3cb7e","year":2024},"citing_paper":{"arxiv_id":"2505.08807","last_updated":"2025-05-12T02:04:57Z","snapshot_observed_at":"2026-08-15T22:20:56.452628Z","submitted_at":"2025-05-12T02:04:57Z","title":"Security of Internet of Agents: Attacks and Countermeasures","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-15T22:26:17.813577Z"},"links":{"citing_paper":"/paper/2505.08807"},"observation_digest":"sha256:e07bf65acb55efb257d7e6fd7b19b127f306541ee7a8632b94e566b0ece9282c","observation_id":"a2e5d861-9bf8-40c6-b7ea-83a3bb7fcf0a","resolution":{"observed_at":"2026-08-15T22:26:19.193205Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:26:19.172125Z","title":"Agent to agent protocol (A2A)","venue":null,"work_id":"f3c3df7c-2b2f-45d0-9b48-7a97e05e876f","year":null},"citing_paper":{"arxiv_id":"2505.08807","last_updated":"2025-05-12T02:04:57Z","snapshot_observed_at":"2026-08-15T22:20:56.452628Z","submitted_at":"2025-05-12T02:04:57Z","title":"Security of Internet of Agents: Attacks and Countermeasures","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-15T22:26:17.817988Z"},"links":{"citing_paper":"/paper/2505.08807"},"observation_digest":"sha256:6ecb5df6b0593ac8b2b0d0b21b09759ea416501abf255af0be39c0bf204e9da8","observation_id":"e7bbfd2c-af5c-46ca-8892-8aa2c10a6116","resolution":{"observed_at":"2026-08-15T22:26:19.177194Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:26:19.139108Z","title":"Agent network protocol (ANP)","venue":null,"work_id":"36b50c50-e318-4b0d-b72d-8b8f45367a98","year":null},"citing_paper":{"arxiv_id":"2505.08807","last_updated":"2025-05-12T02:04:57Z","snapshot_observed_at":"2026-08-15T22:20:56.452628Z","submitted_at":"2025-05-12T02:04:57Z","title":"Security of Internet of Agents: Attacks and Countermeasures","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-15T22:26:17.827033Z"},"links":{"citing_paper":"/paper/2505.08807"},"observation_digest":"sha256:817223a27b218d52987b054b128b00a45be59aedbf62865437e02aa881dd58e9","observation_id":"5d7f05b4-5a7b-4b3f-ad39-5133cf14c3a4","resolution":{"observed_at":"2026-08-15T22:26:19.144114Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:26:19.111043Z","title":"Agora protocol","venue":null,"work_id":"0e2362f5-2d94-4389-91df-89aebd55e95d","year":null},"citing_paper":{"arxiv_id":"2505.08807","last_updated":"2025-05-12T02:04:57Z","snapshot_observed_at":"2026-08-15T22:20:56.452628Z","submitted_at":"2025-05-12T02:04:57Z","title":"Security of Internet of Agents: Attacks and Countermeasures","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-15T22:26:17.836046Z"},"links":{"citing_paper":"/paper/2505.08807"},"observation_digest":"sha256:cece639fd848ab275366b8d5f1296b801e615251bfa6d78314297e1833f7d0f3","observation_id":"4ef1aefd-1b4e-4be9-b9c5-3d1ac1b71854","resolution":{"observed_at":"2026-08-15T22:26:19.116155Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2503.23278","last_updated":"2025-10-07T07:13:32Z","snapshot_observed_at":"2026-08-14T03:34:08.418318Z","submitted_at":"2025-03-30T01:58:22Z","title":"Model Context Protocol (MCP): Landscape, Security Threats, and Future Research Directions","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2503.23278","snapshot_observed_at":"2026-08-15T22:26:17.845834Z","title":"Model context protocol (MCP): Landscape, security threats, and future research directions,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2505.08807","last_updated":"2025-05-12T02:04:57Z","snapshot_observed_at":"2026-08-15T22:20:56.452628Z","submitted_at":"2025-05-12T02:04:57Z","title":"Security of Internet of Agents: Attacks and Countermeasures","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-15T22:26:17.845834Z"},"links":{"cited_paper":"/paper/2503.23278","citing_paper":"/paper/2505.08807"},"observation_digest":"sha256:26a66227e9b86c9c1624b2b4ec75a421006bc43390248b670d722dab88efd513","observation_id":"2ef51d28-cd8d-431a-875a-1859ec4f4ce2","resolution":{"observed_at":"2026-08-15T22:26:17.845834Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:26:19.093937Z","title":"Whole-process privacy-preserving and sybil-resilient consensus for multiagent net- works,","venue":null,"work_id":"4433cbbc-9e32-4329-bd6e-e4af06217a07","year":2024},"citing_paper":{"arxiv_id":"2505.08807","last_updated":"2025-05-12T02:04:57Z","snapshot_observed_at":"2026-08-15T22:20:56.452628Z","submitted_at":"2025-05-12T02:04:57Z","title":"Security of Internet of Agents: Attacks and Countermeasures","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-15T22:26:17.851445Z"},"links":{"citing_paper":"/paper/2505.08807"},"observation_digest":"sha256:5db29fd48fe253dc417f4416cbded2e25f9fb0b5bd89acf42d2f14988a4c54ef","observation_id":"9b80e39f-3099-4858-a67c-cc943155d359","resolution":{"observed_at":"2026-08-15T22:26:19.099678Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:26:19.155978Z","title":"26, 2025","venue":null,"work_id":"c727e37e-7489-4e96-bb97-8d3720a7ccbf","year":2025},"citing_paper":{"arxiv_id":"2505.08807","last_updated":"2025-05-12T02:04:57Z","snapshot_observed_at":"2026-08-15T22:20:56.452628Z","submitted_at":"2025-05-12T02:04:57Z","title":"Security of Internet of Agents: Attacks and Countermeasures","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-15T22:26:17.840804Z"},"links":{"citing_paper":"/paper/2505.08807"},"observation_digest":"sha256:209648de2a8a4ec05124ef460c9b8af2a87770c61ef3f4d567fb2023839999f1","observation_id":"879e4a39-6a50-4d9e-af96-52bdf92607f3","resolution":{"observed_at":"2026-08-15T22:26:19.161151Z","resolver_source":"raw_fallback","status":"parse_uncertain"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:26:19.050551Z","title":"A survey on access control in the age of Internet of things,","venue":null,"work_id":"1c269e28-0bbf-4a70-a9bf-388422ca133c","year":2020},"citing_paper":{"arxiv_id":"2505.08807","last_updated":"2025-05-12T02:04:57Z","snapshot_observed_at":"2026-08-15T22:20:56.452628Z","submitted_at":"2025-05-12T02:04:57Z","title":"Security of Internet of Agents: Attacks and Countermeasures","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-15T22:26:17.865352Z"},"links":{"citing_paper":"/paper/2505.08807"},"observation_digest":"sha256:fcdd1d329bce58a8af326643dcbae515341451063b1e446476bff574fb02db0e","observation_id":"bafa9c4c-4ea6-4315-82da-d092237bb03e","resolution":{"observed_at":"2026-08-15T22:26:19.054947Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:26:17.870495Z","title":"A survey on decentralized identifiers and verifi- able credentials,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2505.08807","last_updated":"2025-05-12T02:04:57Z","snapshot_observed_at":"2026-08-15T22:20:56.452628Z","submitted_at":"2025-05-12T02:04:57Z","title":"Security of Internet of Agents: Attacks and Countermeasures","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-15T22:26:17.870495Z"},"links":{"citing_paper":"/paper/2505.08807"},"observation_digest":"sha256:451be45f14478baf9ffe16f0151247f967f80a5b91ae751a3ee9623d439656ae","observation_id":"2d3d8c94-a882-4405-8747-7a6e67cb9455","resolution":{"observed_at":"2026-08-15T22:26:17.870495Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:26:19.079384Z","title":"MCP security notification: Tool poisoning attacks","venue":null,"work_id":"7a4aa529-e3f5-4be4-b3d7-ba8888c3979b","year":null},"citing_paper":{"arxiv_id":"2505.08807","last_updated":"2025-05-12T02:04:57Z","snapshot_observed_at":"2026-08-15T22:20:56.452628Z","submitted_at":"2025-05-12T02:04:57Z","title":"Security of Internet of Agents: Attacks and Countermeasures","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-15T22:26:17.855871Z"},"links":{"citing_paper":"/paper/2505.08807"},"observation_digest":"sha256:33491d9be8c9fc587538ad89671eba0ca5fbeaa277e16c0760ee27b9a85ec661","observation_id":"dc95d2ef-9aaa-456a-9517-d4a2a0c67acf","resolution":{"observed_at":"2026-08-15T22:26:19.084156Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:26:19.064457Z","title":null,"venue":null,"work_id":"ffacb779-6c34-44fc-b986-36da1b27bfd4","year":2025},"citing_paper":{"arxiv_id":"2505.08807","last_updated":"2025-05-12T02:04:57Z","snapshot_observed_at":"2026-08-15T22:20:56.452628Z","submitted_at":"2025-05-12T02:04:57Z","title":"Security of Internet of Agents: Attacks and Countermeasures","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-15T22:26:17.860670Z"},"links":{"citing_paper":"/paper/2505.08807"},"observation_digest":"sha256:de83e972e821ccb49c5da70931b705668a02f11344cb3d753cfbd3625f5a17b8","observation_id":"8bcdd4f2-006e-42cc-993d-795a5d11f9d0","resolution":{"observed_at":"2026-08-15T22:26:19.069015Z","resolver_source":"raw_fallback","status":"parse_uncertain"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2407.20859","last_updated":"2024-07-30T14:35:31Z","snapshot_observed_at":"2026-08-16T16:13:43.780714Z","submitted_at":"2024-07-30T14:35:31Z","title":"Breaking Agents: Compromising Autonomous LLM Agents Through Malfunction Amplification","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.20859","snapshot_observed_at":"2026-08-15T22:26:17.886848Z","title":"Breaking agents: Compromising autonomous LLM agents through malfunction amplification,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.08807","last_updated":"2025-05-12T02:04:57Z","snapshot_observed_at":"2026-08-15T22:20:56.452628Z","submitted_at":"2025-05-12T02:04:57Z","title":"Security of Internet of Agents: Attacks and Countermeasures","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-15T22:26:17.886848Z"},"links":{"cited_paper":"/paper/2407.20859","citing_paper":"/paper/2505.08807"},"observation_digest":"sha256:8d2dd36f259b4a0a7bd45a5ca815cbd6ca1647d8bdc33b16baf40064964cb48a","observation_id":"5a18874b-17a0-4660-9e1b-f330c1608202","resolution":{"observed_at":"2026-08-15T22:26:17.886848Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2408.08902","last_updated":"2024-08-12T11:33:45Z","snapshot_observed_at":"2026-08-16T13:27:03.447054Z","submitted_at":"2024-08-12T11:33:45Z","title":"Audit-LLM: Multi-Agent Collaboration for Log-based Insider Threat Detection","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2408.08902","snapshot_observed_at":"2026-08-15T22:26:17.892533Z","title":"Audit-LLM: Multi-agent collaboration for log-based insider threat detection,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.08807","last_updated":"2025-05-12T02:04:57Z","snapshot_observed_at":"2026-08-15T22:20:56.452628Z","submitted_at":"2025-05-12T02:04:57Z","title":"Security of Internet of Agents: Attacks and Countermeasures","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-15T22:26:17.892533Z"},"links":{"cited_paper":"/paper/2408.08902","citing_paper":"/paper/2505.08807"},"observation_digest":"sha256:f53f2b21dfaf0029fb92f2fa5a6060300113b52e55e5f8d01d902e498c2c195a","observation_id":"cbe5afb5-4d86-4e18-8a8d-5bbc872b76fb","resolution":{"observed_at":"2026-08-15T22:26:17.892533Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:26:19.035973Z","title":"PoisonedRAG: Knowledge poisoning attacks to retrieval-augmented generation of large language models,","venue":null,"work_id":"98463744-5217-447d-b97b-b1041c751d27","year":2024},"citing_paper":{"arxiv_id":"2505.08807","last_updated":"2025-05-12T02:04:57Z","snapshot_observed_at":"2026-08-15T22:20:56.452628Z","submitted_at":"2025-05-12T02:04:57Z","title":"Security of Internet of Agents: Attacks and Countermeasures","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-15T22:26:17.876090Z"},"links":{"citing_paper":"/paper/2505.08807"},"observation_digest":"sha256:fc1d468034dcec54b10c364d6a1cdc7dd18ba0cc316edbbda6b91ffd5838f255","observation_id":"6c4b4a79-0c9e-40f9-8582-e43084061d8d","resolution":{"observed_at":"2026-08-15T22:26:19.041050Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:26:19.020350Z","title":"Pandora: Detailed LLM jailbreaking via collaborated phishing agents with decomposed reasoning,","venue":null,"work_id":"a5941e21-1181-4fc4-9a65-49b30f7ffb26","year":2024},"citing_paper":{"arxiv_id":"2505.08807","last_updated":"2025-05-12T02:04:57Z","snapshot_observed_at":"2026-08-15T22:20:56.452628Z","submitted_at":"2025-05-12T02:04:57Z","title":"Security of Internet of Agents: Attacks and Countermeasures","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-15T22:26:17.880828Z"},"links":{"citing_paper":"/paper/2505.08807"},"observation_digest":"sha256:7be9a1424903b31f80e940d41056ea2079ff2a534a0f7dc7e01ca719002d339c","observation_id":"48d0f7fe-7cd6-45f5-aa48-38cdb677140b","resolution":{"observed_at":"2026-08-15T22:26:19.025855Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:26:18.988662Z","title":"Retrieval-augmented generation for knowledge-intensive NLP tasks,","venue":null,"work_id":"962184bd-a0fd-4cae-ae19-de5a5d61717c","year":2020},"citing_paper":{"arxiv_id":"2505.08807","last_updated":"2025-05-12T02:04:57Z","snapshot_observed_at":"2026-08-15T22:20:56.452628Z","submitted_at":"2025-05-12T02:04:57Z","title":"Security of Internet of Agents: Attacks and Countermeasures","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-15T22:26:17.907789Z"},"links":{"citing_paper":"/paper/2505.08807"},"observation_digest":"sha256:95aecd525b2a79db341c98485d27a44c37bba5dd2b4ddc7cc89b805176827115","observation_id":"62e9033f-82e0-4294-8c4a-2f996e01ca30","resolution":{"observed_at":"2026-08-15T22:26:18.994319Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.14262","last_updated":"2024-10-25T17:24:16Z","snapshot_observed_at":"2026-08-16T13:08:07.367237Z","submitted_at":"2024-10-18T08:18:18Z","title":"Good Parenting is all you need -- Multi-agentic LLM Hallucination Mitigation","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.14262","snapshot_observed_at":"2026-08-15T22:26:17.913599Z","title":"Good parenting is all you need–multi-agentic LLM hallucination mitigation,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.08807","last_updated":"2025-05-12T02:04:57Z","snapshot_observed_at":"2026-08-15T22:20:56.452628Z","submitted_at":"2025-05-12T02:04:57Z","title":"Security of Internet of Agents: Attacks and Countermeasures","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-15T22:26:17.913599Z"},"links":{"cited_paper":"/paper/2410.14262","citing_paper":"/paper/2505.08807"},"observation_digest":"sha256:28e906463190aad1d5a56b893a2d6d98592f09ff086e1de78f9b1bfdd89fd8dc","observation_id":"389a5b63-b2de-41ec-acef-35d4865c702d","resolution":{"observed_at":"2026-08-15T22:26:17.913599Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:26:19.004886Z","title":"GPTSwarm: Language agents as optimizable graphs,","venue":null,"work_id":"1c490e5e-f91f-4333-b07e-d225c5b2ca5d","year":2024},"citing_paper":{"arxiv_id":"2505.08807","last_updated":"2025-05-12T02:04:57Z","snapshot_observed_at":"2026-08-15T22:20:56.452628Z","submitted_at":"2025-05-12T02:04:57Z","title":"Security of Internet of Agents: Attacks and Countermeasures","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-15T22:26:17.897631Z"},"links":{"citing_paper":"/paper/2505.08807"},"observation_digest":"sha256:e4631035cebb63d2c62b3f48f07b586334290fec54aa707dac877a686e65d0fb","observation_id":"ec6ce106-de6e-41c4-a6ff-0da6e1a85a87","resolution":{"observed_at":"2026-08-15T22:26:19.009754Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2025.35600","doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:26:18.220005Z","title":"Exploring LLM- based multi-agent situation awareness for zero-trust space-air-ground integrated network,","venue":null,"work_id":"a8c662d5-ce8c-45a9-90ee-ed5cc3e7eea0","year":2025},"citing_paper":{"arxiv_id":"2505.08807","last_updated":"2025-05-12T02:04:57Z","snapshot_observed_at":"2026-08-15T22:20:56.452628Z","submitted_at":"2025-05-12T02:04:57Z","title":"Security of Internet of Agents: Attacks and Countermeasures","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-15T22:26:17.902601Z"},"links":{"citing_paper":"/paper/2505.08807"},"observation_digest":"sha256:5e52cc7dbac779a5537822ba33e40838e8805b3da32e38cc9f127f64dad7ad6b","observation_id":"2cedc4e8-2523-4668-8f83-83bcacbdd3eb","resolution":{"observed_at":"2026-08-15T22:26:18.233573Z","resolver_source":"raw_fallback","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:26:18.957237Z","title":"Improving factuality and reasoning in language models through multiagent debate,","venue":null,"work_id":"7bdd33a2-1ba9-460c-8112-0fc219d63036","year":2023},"citing_paper":{"arxiv_id":"2505.08807","last_updated":"2025-05-12T02:04:57Z","snapshot_observed_at":"2026-08-15T22:20:56.452628Z","submitted_at":"2025-05-12T02:04:57Z","title":"Security of Internet of Agents: Attacks and Countermeasures","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-15T22:26:17.928474Z"},"links":{"citing_paper":"/paper/2505.08807"},"observation_digest":"sha256:43e87d75592003474f558ae496708d5e996381bf91b69241a936acb80ae79fd6","observation_id":"0deec00e-62e6-47b3-b095-c6b7ddf7ac58","resolution":{"observed_at":"2026-08-15T22:26:18.962230Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2309.02705","last_updated":"2025-02-04T19:47:09Z","snapshot_observed_at":"2026-08-16T15:02:58.647281Z","submitted_at":"2023-09-06T04:37:20Z","title":"Certifying LLM Safety against Adversarial Prompting","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.02705","snapshot_observed_at":"2026-08-15T22:26:17.933498Z","title":"Certifying LLM safety against adversarial prompting,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.08807","last_updated":"2025-05-12T02:04:57Z","snapshot_observed_at":"2026-08-15T22:20:56.452628Z","submitted_at":"2025-05-12T02:04:57Z","title":"Security of Internet of Agents: Attacks and Countermeasures","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-15T22:26:17.933498Z"},"links":{"cited_paper":"/paper/2309.02705","citing_paper":"/paper/2505.08807"},"observation_digest":"sha256:399e78d1a3f614bda1e87e4b9e6fad29e5273ddc0fdc020369d1ae8359add698","observation_id":"5a7e5b90-202f-4a04-ab93-b32cd90ddba8","resolution":{"observed_at":"2026-08-15T22:26:17.933498Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:26:18.973013Z","title":"RARR: researching and revising what language models say, using language models,","venue":null,"work_id":"d1c1b27b-538b-423e-9d07-cd753413af6c","year":2023},"citing_paper":{"arxiv_id":"2505.08807","last_updated":"2025-05-12T02:04:57Z","snapshot_observed_at":"2026-08-15T22:20:56.452628Z","submitted_at":"2025-05-12T02:04:57Z","title":"Security of Internet of Agents: Attacks and Countermeasures","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-15T22:26:17.918496Z"},"links":{"citing_paper":"/paper/2505.08807"},"observation_digest":"sha256:a4a121921087c60ed483f0502d46978b1e5c5b8b8939074fdcee35f54b446128","observation_id":"af19cfd0-d43c-4c47-9c22-45d4ed71b376","resolution":{"observed_at":"2026-08-15T22:26:18.978149Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.09187","last_updated":"2025-05-29T03:09:05Z","snapshot_observed_at":"2026-07-06T18:30:23.849880Z","submitted_at":"2024-06-13T14:49:26Z","title":"GuardAgent: Safeguard LLM Agents by a Guard Agent via Knowledge-Enabled Reasoning","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.09187","snapshot_observed_at":"2026-08-15T22:26:17.922969Z","title":"GuardAgent: Safeguard LLM agent by a guard agent via knowledge-enabled reasoning,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.08807","last_updated":"2025-05-12T02:04:57Z","snapshot_observed_at":"2026-08-15T22:20:56.452628Z","submitted_at":"2025-05-12T02:04:57Z","title":"Security of Internet of Agents: Attacks and Countermeasures","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-15T22:26:17.922969Z"},"links":{"cited_paper":"/paper/2406.09187","citing_paper":"/paper/2505.08807"},"observation_digest":"sha256:8dca52eb2821a57939ef90e5692d5a2a264eedf49418eb7b1f61b0894e4e8b7a","observation_id":"fe73768b-7b05-4919-ad67-953023031a5e","resolution":{"observed_at":"2026-08-15T22:26:17.922969Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:26:18.904801Z","title":"ESP spoofing: Covert acoustic attack on mems gyroscopes in vehicles,","venue":null,"work_id":"f1be5c7c-dada-4fad-90f4-284e9b5a5356","year":2022},"citing_paper":{"arxiv_id":"2505.08807","last_updated":"2025-05-12T02:04:57Z","snapshot_observed_at":"2026-08-15T22:20:56.452628Z","submitted_at":"2025-05-12T02:04:57Z","title":"Security of Internet of Agents: Attacks and Countermeasures","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-15T22:26:17.950467Z"},"links":{"citing_paper":"/paper/2505.08807"},"observation_digest":"sha256:89823553f73de61872d01dc8c21277b20574b0fac78971cba5cfeb0b5fe8885c","observation_id":"e1403131-e04f-48a7-ae4b-f2b049c2e325","resolution":{"observed_at":"2026-08-15T22:26:18.909753Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:26:18.887416Z","title":"MetaWave: Attacking mmwave sensing with meta-material-enhanced tags,","venue":null,"work_id":"1eb390ca-39a2-43d2-bd19-07c389d231e9","year":2023},"citing_paper":{"arxiv_id":"2505.08807","last_updated":"2025-05-12T02:04:57Z","snapshot_observed_at":"2026-08-15T22:20:56.452628Z","submitted_at":"2025-05-12T02:04:57Z","title":"Security of Internet of Agents: Attacks and Countermeasures","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-15T22:26:17.955426Z"},"links":{"citing_paper":"/paper/2505.08807"},"observation_digest":"sha256:ed9db1d6e8429d32993a33d0fd4fc9b6c7f34154255c4f47bdddd2e1fc420d08","observation_id":"db3ede93-b22b-45f2-be74-be30320bf1b3","resolution":{"observed_at":"2026-08-15T22:26:18.892488Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:26:18.939217Z","title":"LLM self defense: By self examination, LLMs know they are being tricked,","venue":null,"work_id":"7528b0de-60e1-4e96-89ea-557827623f4c","year":2024},"citing_paper":{"arxiv_id":"2505.08807","last_updated":"2025-05-12T02:04:57Z","snapshot_observed_at":"2026-08-15T22:20:56.452628Z","submitted_at":"2025-05-12T02:04:57Z","title":"Security of Internet of Agents: Attacks and Countermeasures","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-15T22:26:17.940122Z"},"links":{"citing_paper":"/paper/2505.08807"},"observation_digest":"sha256:b0a28abfdccb3f7166a30c7c165428755d215a90d9752786ec1f846ec6586788","observation_id":"71936131-6c2b-4581-9c55-40b2a11a73f7","resolution":{"observed_at":"2026-08-15T22:26:18.945302Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:26:18.922715Z","title":"Rocking drones with intentional sound noise on gyroscopic sensors,","venue":null,"work_id":"ac826f01-ade4-4dd9-b3a1-6b34b8920df1","year":2015},"citing_paper":{"arxiv_id":"2505.08807","last_updated":"2025-05-12T02:04:57Z","snapshot_observed_at":"2026-08-15T22:20:56.452628Z","submitted_at":"2025-05-12T02:04:57Z","title":"Security of Internet of Agents: Attacks and Countermeasures","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-15T22:26:17.944732Z"},"links":{"citing_paper":"/paper/2505.08807"},"observation_digest":"sha256:2e535c35ccc20ebb06c951f9e6177dac8fbbdae4f1dc57c3ac6fafa9680c1254","observation_id":"dc0895b7-7a6e-4a2b-b9e2-28aa0c54ddc7","resolution":{"observed_at":"2026-08-15T22:26:18.928563Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:26:18.843065Z","title":"Compromising LLM driven embodied agents with contextual backdoor attacks,","venue":null,"work_id":"c02480cb-d21f-4ac2-b398-8552e36391db","year":2025},"citing_paper":{"arxiv_id":"2505.08807","last_updated":"2025-05-12T02:04:57Z","snapshot_observed_at":"2026-08-15T22:20:56.452628Z","submitted_at":"2025-05-12T02:04:57Z","title":"Security of Internet of Agents: Attacks and Countermeasures","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-15T22:26:17.972208Z"},"links":{"citing_paper":"/paper/2505.08807"},"observation_digest":"sha256:fa3587126907c416a784694d6048e0309bcd91c5144f7558668d8df8a8a7824f","observation_id":"653c121c-7825-479b-a254-edfcd3de8612","resolution":{"observed_at":"2026-08-15T22:26:18.847823Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:26:18.826419Z","title":"BadRobot: Jailbreaking embodied LLMs in the physical world,","venue":null,"work_id":"eb6f810a-32a9-4d70-84bc-6e93b8f40986","year":2025},"citing_paper":{"arxiv_id":"2505.08807","last_updated":"2025-05-12T02:04:57Z","snapshot_observed_at":"2026-08-15T22:20:56.452628Z","submitted_at":"2025-05-12T02:04:57Z","title":"Security of Internet of Agents: Attacks and Countermeasures","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-15T22:26:17.977149Z"},"links":{"citing_paper":"/paper/2505.08807"},"observation_digest":"sha256:5795619abb1c32cc50b521cdab6effed3a6cc99b9fdeb66a03b03ff2d790d222","observation_id":"badbb00b-b027-4fac-9e4c-6cab9ce3d107","resolution":{"observed_at":"2026-08-15T22:26:18.831864Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:26:18.872336Z","title":"Paralyzing drones via EMI signal injection on sensory communication channels.,","venue":null,"work_id":"c9834b65-071b-47de-8708-5e2059f4cd91","year":2023},"citing_paper":{"arxiv_id":"2505.08807","last_updated":"2025-05-12T02:04:57Z","snapshot_observed_at":"2026-08-15T22:20:56.452628Z","submitted_at":"2025-05-12T02:04:57Z","title":"Security of Internet of Agents: Attacks and Countermeasures","version":1},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-15T22:26:17.960247Z"},"links":{"citing_paper":"/paper/2505.08807"},"observation_digest":"sha256:fdc9e77e1ccedd4bd1f5c06db8503f2f322a39c6e8c057e6d181c8d2f9616efc","observation_id":"c72282eb-cd24-4ff1-8bf7-5c797af347ec","resolution":{"observed_at":"2026-08-15T22:26:18.877422Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:26:18.857494Z","title":"Remote attacks on drones vision sensors: An empirical study,","venue":null,"work_id":"bccdf64f-9c30-4008-8ec4-1dc13e4fcea6","year":2021},"citing_paper":{"arxiv_id":"2505.08807","last_updated":"2025-05-12T02:04:57Z","snapshot_observed_at":"2026-08-15T22:20:56.452628Z","submitted_at":"2025-05-12T02:04:57Z","title":"Security of Internet of Agents: Attacks and Countermeasures","version":1},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-15T22:26:17.966629Z"},"links":{"citing_paper":"/paper/2505.08807"},"observation_digest":"sha256:ccfc9ae8f3409188342589cb81b944413ecae3381683af12db61c57cde59984a","observation_id":"bee7f906-31fe-4ca0-8060-9d62fd8bacba","resolution":{"observed_at":"2026-08-15T22:26:18.862324Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:26:18.776579Z","title":"Beyond memoriza- tion: Violating privacy via inference with large language models,","venue":null,"work_id":"a8cc5c8c-be48-4bde-8d61-9ee196230217","year":2024},"citing_paper":{"arxiv_id":"2505.08807","last_updated":"2025-05-12T02:04:57Z","snapshot_observed_at":"2026-08-15T22:20:56.452628Z","submitted_at":"2025-05-12T02:04:57Z","title":"Security of Internet of Agents: Attacks and Countermeasures","version":1},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-15T22:26:17.993091Z"},"links":{"citing_paper":"/paper/2505.08807"},"observation_digest":"sha256:a9f7eabf1ebf217d52785583871b1863f23b85ee1bb3afe271a33120fd25ea2d","observation_id":"e0fc8a2a-0850-45bf-afc4-444c1a1f3070","resolution":{"observed_at":"2026-08-15T22:26:18.781472Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:26:18.761464Z","title":"Text embeddings reveal (almost) as much as text,","venue":null,"work_id":"859b2ac9-7125-423f-8d19-ae958653a401","year":2023},"citing_paper":{"arxiv_id":"2505.08807","last_updated":"2025-05-12T02:04:57Z","snapshot_observed_at":"2026-08-15T22:20:56.452628Z","submitted_at":"2025-05-12T02:04:57Z","title":"Security of Internet of Agents: Attacks and Countermeasures","version":1},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-15T22:26:17.999405Z"},"links":{"citing_paper":"/paper/2505.08807"},"observation_digest":"sha256:6f52cfca65c2f222a3d8d7ae70d118d212de322d971d4833cebac8b68df7c5f5","observation_id":"8e4cd855-dd5e-4e2b-ab90-e87dad96a96b","resolution":{"observed_at":"2026-08-15T22:26:18.766210Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:26:18.809348Z","title":"Language models meet world models: embodied experiences enhance language models,","venue":null,"work_id":"5b97792c-df9f-45f3-ac53-02a6a34b9748","year":2023},"citing_paper":{"arxiv_id":"2505.08807","last_updated":"2025-05-12T02:04:57Z","snapshot_observed_at":"2026-08-15T22:20:56.452628Z","submitted_at":"2025-05-12T02:04:57Z","title":"Security of Internet of Agents: Attacks and Countermeasures","version":1},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-15T22:26:17.982484Z"},"links":{"citing_paper":"/paper/2505.08807"},"observation_digest":"sha256:08f89564fe7553492f79cc52b3d8d49f7c775812c6e41115cb92be4dcf08d66e","observation_id":"f94aa119-2fd4-4d9b-b513-7aebd2a9c0f7","resolution":{"observed_at":"2026-08-15T22:26:18.814686Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:26:18.793053Z","title":"Data augmentation can improve robustness,","venue":null,"work_id":"680d271d-8cca-4469-98c7-dc0ad219c44c","year":2021},"citing_paper":{"arxiv_id":"2505.08807","last_updated":"2025-05-12T02:04:57Z","snapshot_observed_at":"2026-08-15T22:20:56.452628Z","submitted_at":"2025-05-12T02:04:57Z","title":"Security of Internet of Agents: Attacks and Countermeasures","version":1},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-08-15T22:26:17.987525Z"},"links":{"citing_paper":"/paper/2505.08807"},"observation_digest":"sha256:70ecc86c35fda62f623aa716a6a739e7d988fc4e772ddfa19b9ebf2d88c59f92","observation_id":"37561202-7584-4f64-8817-09ac887ced40","resolution":{"observed_at":"2026-08-15T22:26:18.797992Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:26:18.726433Z","title":"ProPILE: Probing privacy leakage in large language models,","venue":null,"work_id":"fa1f16f1-1568-44f2-b66d-32428aebf463","year":2023},"citing_paper":{"arxiv_id":"2505.08807","last_updated":"2025-05-12T02:04:57Z","snapshot_observed_at":"2026-08-15T22:20:56.452628Z","submitted_at":"2025-05-12T02:04:57Z","title":"Security of Internet of Agents: Attacks and Countermeasures","version":1},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-08-15T22:26:18.017908Z"},"links":{"citing_paper":"/paper/2505.08807"},"observation_digest":"sha256:c3a8181d3501ebd349e4afee59d1f1b402d33e42ac3eaa08ae58d9b3fa45d9e3","observation_id":"c38d0f8f-384c-434e-9c07-2c9872f35b10","resolution":{"observed_at":"2026-08-15T22:26:18.732009Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:26:18.708981Z","title":"AutoDefense: Multi- agent LLM defense against jailbreak attacks,","venue":null,"work_id":"d24d5557-29f9-4a93-add9-1a5bc486df0d","year":2024},"citing_paper":{"arxiv_id":"2505.08807","last_updated":"2025-05-12T02:04:57Z","snapshot_observed_at":"2026-08-15T22:20:56.452628Z","submitted_at":"2025-05-12T02:04:57Z","title":"Security of Internet of Agents: Attacks and Countermeasures","version":1},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-08-15T22:26:18.023507Z"},"links":{"citing_paper":"/paper/2505.08807"},"observation_digest":"sha256:b63f58cb6897d0411e34691dc08bb71096b7f438096edfe741bfdc5d481c86f4","observation_id":"46f9012a-7189-4689-bf29-ec01e7d44416","resolution":{"observed_at":"2026-08-15T22:26:18.714345Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2411.14110","last_updated":"2025-08-08T11:56:30Z","snapshot_observed_at":"2026-08-16T13:20:01.900725Z","submitted_at":"2024-11-21T13:18:03Z","title":"Feedback-Guided Extraction of Knowledge Base from Retrieval-Augmented LLM Applications","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2411.14110","snapshot_observed_at":"2026-08-15T22:26:18.005246Z","title":"RAG-Thief: Scalable extraction of private data from retrieval-augmented generation applications with agent-based attacks,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.08807","last_updated":"2025-05-12T02:04:57Z","snapshot_observed_at":"2026-08-15T22:20:56.452628Z","submitted_at":"2025-05-12T02:04:57Z","title":"Security of Internet of Agents: Attacks and Countermeasures","version":1},"reference_index":58,"source":"pdf_text","source_observed_at":"2026-08-15T22:26:18.005246Z"},"links":{"cited_paper":"/paper/2411.14110","citing_paper":"/paper/2505.08807"},"observation_digest":"sha256:13a801e773e9b49584a1b85a4f0283136866c56d66044998d1c56d5b34cad45d","observation_id":"4e07d835-3440-4e31-bb7c-0c3e86615258","resolution":{"observed_at":"2026-08-15T22:26:18.005246Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:26:18.744651Z","title":"Extracting training data from large language models,","venue":null,"work_id":"1207700f-027e-4205-a6b5-02de5ebf4d77","year":2021},"citing_paper":{"arxiv_id":"2505.08807","last_updated":"2025-05-12T02:04:57Z","snapshot_observed_at":"2026-08-15T22:20:56.452628Z","submitted_at":"2025-05-12T02:04:57Z","title":"Security of Internet of Agents: Attacks and Countermeasures","version":1},"reference_index":59,"source":"pdf_text","source_observed_at":"2026-08-15T22:26:18.011481Z"},"links":{"citing_paper":"/paper/2505.08807"},"observation_digest":"sha256:dfe86349cb7d3a8d7f34540238b953de37a56638eeb3e548032823527cefc2bd","observation_id":"9e8a61d0-6741-45f5-9e54-bda2af26350e","resolution":{"observed_at":"2026-08-15T22:26:18.750709Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:26:18.650824Z","title":"Mobile edge intelligence for large language models: A contemporary survey,","venue":null,"work_id":"ddc9ea8f-0bd3-4445-864a-5b4bcb7163ea","year":2025},"citing_paper":{"arxiv_id":"2505.08807","last_updated":"2025-05-12T02:04:57Z","snapshot_observed_at":"2026-08-15T22:20:56.452628Z","submitted_at":"2025-05-12T02:04:57Z","title":"Security of Internet of Agents: Attacks and Countermeasures","version":1},"reference_index":60,"source":"pdf_text","source_observed_at":"2026-08-15T22:26:18.041439Z"},"links":{"citing_paper":"/paper/2505.08807"},"observation_digest":"sha256:364d85f810ed8a9839113531d8a4b3bee65a3055c9c615e13f92bf7428363325","observation_id":"03673794-e9c8-4af6-844c-556c5d311f35","resolution":{"observed_at":"2026-08-15T22:26:18.657722Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:26:18.689242Z","title":"AutoGen: Enabling next-gen LLM applications via multi- agent conversation,","venue":null,"work_id":"31f92a50-5a1b-4fb7-b163-36766ace80f7","year":2024},"citing_paper":{"arxiv_id":"2505.08807","last_updated":"2025-05-12T02:04:57Z","snapshot_observed_at":"2026-08-15T22:20:56.452628Z","submitted_at":"2025-05-12T02:04:57Z","title":"Security of Internet of Agents: Attacks and Countermeasures","version":1},"reference_index":62,"source":"pdf_text","source_observed_at":"2026-08-15T22:26:18.029117Z"},"links":{"citing_paper":"/paper/2505.08807"},"observation_digest":"sha256:2ed9aad7d2a73e82ad09cc38289892592fdc17c3b353003143f3f1ef1c5456ad","observation_id":"8fe300fb-8199-403c-af1c-ef4a1b74c603","resolution":{"observed_at":"2026-08-15T22:26:18.695428Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:26:18.668538Z","title":"Social-aware clustered federated learning with customized privacy preservation,","venue":null,"work_id":"6c78f30d-e6b4-49b9-b56c-c8391f9412a1","year":2024},"citing_paper":{"arxiv_id":"2505.08807","last_updated":"2025-05-12T02:04:57Z","snapshot_observed_at":"2026-08-15T22:20:56.452628Z","submitted_at":"2025-05-12T02:04:57Z","title":"Security of Internet of Agents: Attacks and Countermeasures","version":1},"reference_index":63,"source":"pdf_text","source_observed_at":"2026-08-15T22:26:18.035431Z"},"links":{"citing_paper":"/paper/2505.08807"},"observation_digest":"sha256:76a22a1916040acfee3afd3e7f52ab95780f38c96e0eae91fd17a795111e13f6","observation_id":"ff7b8b09-9477-49e9-9aea-cd7529c15e48","resolution":{"observed_at":"2026-08-15T22:26:18.673792Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:26:17.831538Z","title":"20, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2505.08807","last_updated":"2025-05-12T02:04:57Z","snapshot_observed_at":"2026-08-15T22:20:56.452628Z","submitted_at":"2025-05-12T02:04:57Z","title":"Security of Internet of Agents: Attacks and Countermeasures","version":1},"reference_index":2024,"source":"pdf_text","source_observed_at":"2026-08-15T22:26:17.831538Z"},"links":{"citing_paper":"/paper/2505.08807"},"observation_digest":"sha256:4cf2bc589e8cfc53aaecc4db24dd41a621f08a8f6122b56010d5bed83a060800","observation_id":"359d065a-2052-471a-8637-52e3146f9a67","resolution":{"observed_at":"2026-08-15T22:26:17.831538Z","resolver_source":null,"status":"parse_uncertain"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2505.08807","last_updated":"2025-05-12T02:04:57Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-15T22:20:56.452628Z","submitted_at":"2025-05-12T02:04:57Z","title":"Security of Internet of Agents: Attacks and Countermeasures"},"reference_resolution":{"displayed":63,"state_counts":{"malformed_identifier":0,"metadata_mismatch":1,"parse_uncertain":3,"unresolved":16,"verified_exact":0,"verified_fuzzy":43},"total_outbound_references":63},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"thesis":"As of 17 August 2026, this Paper Citation Record lists 63 of 63 outbound references and 3 inbound Pith citation observations for arXiv:2505.08807."}