{"as_of":"2026-08-08T07:00:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:d319966fcb10ce04e11b1f1aa329b0b24e7174e628475e8da3ed76484a171515","coverage":[{"denominator":41,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":41,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T11:07:37.498468Z","state":"measured"},{"denominator":44,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":44,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-08T06:32:00.761636+00:00","state":"measured"},{"denominator":3,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":3,"source":"paper_references, paper_reference_links","source_observed_at":"2026-05-22T05:29:52.758898Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-05-22T05:31:07.660447Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2506.05401","last_updated":"2025-06-04T01:23:35Z","snapshot_observed_at":"2026-08-07T10:59:42.726463Z","submitted_at":"2025-06-04T01:23:35Z","title":"Robust Anti-Backdoor Instruction Tuning in LVLMs","version":1},"cited_work":{"arxiv_id":"2506.05401","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2506.05401","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"arXiv preprint arXiv:2506.05401 , year=","venue":null,"work_id":"6eb7fd2b-2cbb-42ac-99c3-7cc61bc6bc53","year":2025},"citing_paper":{"arxiv_id":"2604.04488","last_updated":"2026-04-06T07:27:04Z","snapshot_observed_at":"2026-08-05T13:21:08.142791Z","submitted_at":"2026-04-06T07:27:04Z","title":"A Patch-based Cross-view Regularized Framework for Backdoor Defense in Multimodal Large Language Models","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-05-10T20:14:02.553313Z"},"links":{"cited_paper":"/paper/2506.05401","citing_paper":"/paper/2604.04488"},"observation_digest":"sha256:2b8bf50cd905b67b966b0743342449a63017e1eacd8e1e73a3f1e53143fe481c","observation_id":"e2e9d226-d3c3-4433-a8a1-fde450d50091","resolution":{"observed_at":"2026-05-10T22:05:49.185883Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2506.05401","last_updated":"2025-06-04T01:23:35Z","snapshot_observed_at":"2026-08-07T10:59:42.726463Z","submitted_at":"2025-06-04T01:23:35Z","title":"Robust Anti-Backdoor Instruction Tuning in LVLMs","version":1},"cited_work":{"arxiv_id":"2506.05401","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2506.05401","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"arXiv preprint arXiv:2506.05401 , year=","venue":null,"work_id":"6eb7fd2b-2cbb-42ac-99c3-7cc61bc6bc53","year":2025},"citing_paper":{"arxiv_id":"2605.15711","last_updated":"2026-05-15T08:01:32Z","snapshot_observed_at":"2026-07-06T23:26:56.013191Z","submitted_at":"2026-05-15T08:01:32Z","title":"EntropyScan: Towards Model-level Backdoor Detection in LVLMs via Visual Attention Entropy","version":1},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-05-20T19:46:49.000647Z"},"links":{"cited_paper":"/paper/2506.05401","citing_paper":"/paper/2605.15711"},"observation_digest":"sha256:2c7b9e7b324b6838248394af2023ff158fd2db9a0f3e43beafbde11ed735d961","observation_id":"7c69b674-2df9-42c1-9dcf-c84db03c0512","resolution":{"observed_at":"2026-05-20T19:48:57.434708Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2506.05401","last_updated":"2025-06-04T01:23:35Z","snapshot_observed_at":"2026-08-07T10:59:42.726463Z","submitted_at":"2025-06-04T01:23:35Z","title":"Robust Anti-Backdoor Instruction Tuning in LVLMs","version":1},"cited_work":{"arxiv_id":"2506.05401","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2506.05401","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"arXiv preprint arXiv:2506.05401 , year=","venue":null,"work_id":"6eb7fd2b-2cbb-42ac-99c3-7cc61bc6bc53","year":2025},"citing_paper":{"arxiv_id":"2605.22365","last_updated":"2026-05-25T01:50:16Z","snapshot_observed_at":"2026-08-01T15:33:50.569569Z","submitted_at":"2026-05-21T11:58:46Z","title":"TimeGuard: Channel-wise Pool Training for Backdoor Defense in Time Series Forecasting","version":1},"reference_index":123,"source":"arxiv_source","source_observed_at":"2026-05-22T05:29:52.758898Z"},"links":{"cited_paper":"/paper/2506.05401","citing_paper":"/paper/2605.22365"},"observation_digest":"sha256:5a315ab94a5688e7a0d4b1deca84b394c2759b2dd6f68bd9f1f587fca352c6b4","observation_id":"8896ba9e-107e-48bb-bc85-f3776bfec02b","resolution":{"observed_at":"2026-05-22T05:31:07.663218Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2506.05401/citation-record","integrity":"/paper/2506.05401/integrity","json":"/paper/2506.05401/citation-record.json","paper":"/paper/2506.05401"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:07:37.357327Z","title":"Flamingo: a visual language model for few-shot learning","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2506.05401","last_updated":"2025-06-04T01:23:35Z","snapshot_observed_at":"2026-08-07T10:59:42.726463Z","submitted_at":"2025-06-04T01:23:35Z","title":"Robust Anti-Backdoor Instruction Tuning in LVLMs","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-07T11:07:37.357327Z"},"links":{"citing_paper":"/paper/2506.05401"},"observation_digest":"sha256:02911209606d0121af130a8bb5daeb63883383030fd2c644535e0b397f21fd34","observation_id":"b868d0c8-acc0-4e78-9db4-aaa044a65def","resolution":{"observed_at":"2026-08-07T11:07:37.357327Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2306.05425","last_updated":"2023-06-08T17:59:56Z","snapshot_observed_at":"2026-07-06T15:40:24.127663Z","submitted_at":"2023-06-08T17:59:56Z","title":"MIMIC-IT: Multi-Modal In-Context Instruction Tuning","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2306.05425","snapshot_observed_at":"2026-08-07T11:07:37.361566Z","title":"Mimic-it: Multi-modal in-context instruction tuning","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.05401","last_updated":"2025-06-04T01:23:35Z","snapshot_observed_at":"2026-08-07T10:59:42.726463Z","submitted_at":"2025-06-04T01:23:35Z","title":"Robust Anti-Backdoor Instruction Tuning in LVLMs","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-07T11:07:37.361566Z"},"links":{"cited_paper":"/paper/2306.05425","citing_paper":"/paper/2506.05401"},"observation_digest":"sha256:dbedc1f94bf8a0a1e7583bbcb883a625d49c9f312ee98bea81ed1abf7e8d20ce","observation_id":"6e3f0c30-c293-446c-b31c-1486003f2cbf","resolution":{"observed_at":"2026-08-07T11:07:37.361566Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:07:37.365712Z","title":"Llava-plus: Learning to use tools for creating multimodal agents","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.05401","last_updated":"2025-06-04T01:23:35Z","snapshot_observed_at":"2026-08-07T10:59:42.726463Z","submitted_at":"2025-06-04T01:23:35Z","title":"Robust Anti-Backdoor Instruction Tuning in LVLMs","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-07T11:07:37.365712Z"},"links":{"citing_paper":"/paper/2506.05401"},"observation_digest":"sha256:b016a3e2530e6a943d51967389add561edaab7c62b552df5d7134a56a385bb43","observation_id":"ee69dab6-8745-4afb-82ae-d273463a5777","resolution":{"observed_at":"2026-08-07T11:07:37.365712Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:07:37.369572Z","title":"Blip-2: Bootstrapping language-image pre-training with frozen image encoders and large language models","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.05401","last_updated":"2025-06-04T01:23:35Z","snapshot_observed_at":"2026-08-07T10:59:42.726463Z","submitted_at":"2025-06-04T01:23:35Z","title":"Robust Anti-Backdoor Instruction Tuning in LVLMs","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-07T11:07:37.369572Z"},"links":{"citing_paper":"/paper/2506.05401"},"observation_digest":"sha256:7594d23eb1447024266ba81c556436a0aba5fcb06fefee7144957bf67225807c","observation_id":"b45a841b-6072-4d24-aab5-b61a0c8e4d18","resolution":{"observed_at":"2026-08-07T11:07:37.369572Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2304.10592","last_updated":"2023-10-02T16:38:35Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-04-20T18:25:35Z","title":"MiniGPT-4: Enhancing Vision-Language Understanding with Advanced Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2304.10592","snapshot_observed_at":"2026-08-07T11:07:37.373024Z","title":"Minigpt-4: Enhancing vision-language understanding with advanced large language models","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.05401","last_updated":"2025-06-04T01:23:35Z","snapshot_observed_at":"2026-08-07T10:59:42.726463Z","submitted_at":"2025-06-04T01:23:35Z","title":"Robust Anti-Backdoor Instruction Tuning in LVLMs","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-07T11:07:37.373024Z"},"links":{"cited_paper":"/paper/2304.10592","citing_paper":"/paper/2506.05401"},"observation_digest":"sha256:16dd69e9a6c7f73e430e2fdd02c9d141ad7e7e51202b2575e3d996f70bde0ffc","observation_id":"23ae39c0-a358-4a92-a27a-81743846319c","resolution":{"observed_at":"2026-08-07T11:07:37.373024Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:07:37.970026Z","title":"Vqa: Visual question answering","venue":null,"work_id":"9dc81251-5acf-4199-85c2-d13052c5a373","year":2015},"citing_paper":{"arxiv_id":"2506.05401","last_updated":"2025-06-04T01:23:35Z","snapshot_observed_at":"2026-08-07T10:59:42.726463Z","submitted_at":"2025-06-04T01:23:35Z","title":"Robust Anti-Backdoor Instruction Tuning in LVLMs","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-07T11:07:37.376676Z"},"links":{"citing_paper":"/paper/2506.05401"},"observation_digest":"sha256:650b2a6b295cd848908aeebac45321e33429760e2106b62b2da2db8e09168892","observation_id":"18e7090f-091c-4b21-ae5f-22ba23a9d536","resolution":{"observed_at":"2026-08-07T11:07:37.973390Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:07:37.959184Z","title":"A comprehensive survey of deep learning for image captioning","venue":null,"work_id":"d31c25ba-51e4-4803-807b-e2c3e8dfedb6","year":2019},"citing_paper":{"arxiv_id":"2506.05401","last_updated":"2025-06-04T01:23:35Z","snapshot_observed_at":"2026-08-07T10:59:42.726463Z","submitted_at":"2025-06-04T01:23:35Z","title":"Robust Anti-Backdoor Instruction Tuning in LVLMs","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-07T11:07:37.380193Z"},"links":{"citing_paper":"/paper/2506.05401"},"observation_digest":"sha256:317be275353ca50e980edfdbe04afa6b92ff17f76dbe766e75645d365999a291","observation_id":"4304e154-09c0-46ff-b006-22d2000be5c6","resolution":{"observed_at":"2026-08-07T11:07:37.962698Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:07:37.948882Z","title":"Visual navigation for mobile robots: A survey","venue":null,"work_id":"69b65b6b-f489-4ffc-89ae-c268a0a0caa9","year":2008},"citing_paper":{"arxiv_id":"2506.05401","last_updated":"2025-06-04T01:23:35Z","snapshot_observed_at":"2026-08-07T10:59:42.726463Z","submitted_at":"2025-06-04T01:23:35Z","title":"Robust Anti-Backdoor Instruction Tuning in LVLMs","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-07T11:07:37.383322Z"},"links":{"citing_paper":"/paper/2506.05401"},"observation_digest":"sha256:5c6486d389d808193245de0c59dc58d06742b942b4401d86f2514d3c149914e4","observation_id":"681306c8-4bfb-40d1-b505-896a2a39e54d","resolution":{"observed_at":"2026-08-07T11:07:37.952455Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2007.10760","last_updated":"2020-08-02T08:38:25Z","snapshot_observed_at":"2026-07-06T09:40:34.148418Z","submitted_at":"2020-07-21T12:49:12Z","title":"Backdoor Attacks and Countermeasures on Deep Learning: A Comprehensive Review","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2007.10760","snapshot_observed_at":"2026-08-07T11:07:37.386575Z","title":"Backdoor attacks and countermeasures on deep learning: A comprehensive review","venue":null,"work_id":null,"year":2007},"citing_paper":{"arxiv_id":"2506.05401","last_updated":"2025-06-04T01:23:35Z","snapshot_observed_at":"2026-08-07T10:59:42.726463Z","submitted_at":"2025-06-04T01:23:35Z","title":"Robust Anti-Backdoor Instruction Tuning in LVLMs","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-07T11:07:37.386575Z"},"links":{"cited_paper":"/paper/2007.10760","citing_paper":"/paper/2506.05401"},"observation_digest":"sha256:0ed9f07d7d355b9398ef782b8c6164d1fee0b9f19c65bd0e4e19b98f3aaa2796","observation_id":"e55191d2-765f-431f-9d21-c3b2554f12c0","resolution":{"observed_at":"2026-08-07T11:07:37.386575Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:07:37.938841Z","title":"Badclip: Dual- embedding guided backdoor attack on multimodal contrastive learning","venue":null,"work_id":"c62bb463-3a1c-41df-a81f-5bdff92fcbde","year":2024},"citing_paper":{"arxiv_id":"2506.05401","last_updated":"2025-06-04T01:23:35Z","snapshot_observed_at":"2026-08-07T10:59:42.726463Z","submitted_at":"2025-06-04T01:23:35Z","title":"Robust Anti-Backdoor Instruction Tuning in LVLMs","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-07T11:07:37.390055Z"},"links":{"citing_paper":"/paper/2506.05401"},"observation_digest":"sha256:b8feb138d25010a7d8cf8bf0ee76dc73a859d75a5ad27a635390d8d0736e54ec","observation_id":"05021b72-fa5e-4f09-96e4-f59588c51430","resolution":{"observed_at":"2026-08-07T11:07:37.942376Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2312.15172","last_updated":"2023-12-23T05:51:40Z","snapshot_observed_at":"2026-08-07T10:04:56.035119Z","submitted_at":"2023-12-23T05:51:40Z","title":"Pre-trained Trojan Attacks for Visual Recognition","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.15172","snapshot_observed_at":"2026-08-07T11:07:37.393240Z","title":"Pre-trained trojan attacks for visual recognition","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.05401","last_updated":"2025-06-04T01:23:35Z","snapshot_observed_at":"2026-08-07T10:59:42.726463Z","submitted_at":"2025-06-04T01:23:35Z","title":"Robust Anti-Backdoor Instruction Tuning in LVLMs","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-07T11:07:37.393240Z"},"links":{"cited_paper":"/paper/2312.15172","citing_paper":"/paper/2506.05401"},"observation_digest":"sha256:b7a8a8df8daee277f78dbed0e9dfe159d5eaffef87dda2c2b18a01af5a606288","observation_id":"713d62c3-4024-4982-9f7d-ef9dc8244ee7","resolution":{"observed_at":"2026-08-07T11:07:37.393240Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.11473","last_updated":"2024-02-18T06:31:05Z","snapshot_observed_at":"2026-08-06T02:43:24.834998Z","submitted_at":"2024-02-18T06:31:05Z","title":"Poisoned Forgery Face: Towards Backdoor Attacks on Face Forgery Detection","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.11473","snapshot_observed_at":"2026-08-07T11:07:37.397004Z","title":"Poisoned forgery face: Towards backdoor attacks on face forgery detection","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.05401","last_updated":"2025-06-04T01:23:35Z","snapshot_observed_at":"2026-08-07T10:59:42.726463Z","submitted_at":"2025-06-04T01:23:35Z","title":"Robust Anti-Backdoor Instruction Tuning in LVLMs","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-07T11:07:37.397004Z"},"links":{"cited_paper":"/paper/2402.11473","citing_paper":"/paper/2506.05401"},"observation_digest":"sha256:2af34e607a1384b88223e15005b6646fc2c884446367b3a54363831197b32ef5","observation_id":"f9d73cf5-804b-47de-9ac9-d87fd398a0fe","resolution":{"observed_at":"2026-08-07T11:07:37.397004Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2405.05553","last_updated":"2024-07-01T10:27:42Z","snapshot_observed_at":"2026-07-06T18:11:57.100591Z","submitted_at":"2024-05-09T05:23:34Z","title":"Towards Robust Physical-world Backdoor Attacks on Lane Detection","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.05553","snapshot_observed_at":"2026-08-07T11:07:37.404099Z","title":"Towards robust physical-world backdoor attacks on lane detection","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.05401","last_updated":"2025-06-04T01:23:35Z","snapshot_observed_at":"2026-08-07T10:59:42.726463Z","submitted_at":"2025-06-04T01:23:35Z","title":"Robust Anti-Backdoor Instruction Tuning in LVLMs","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-07T11:07:37.404099Z"},"links":{"cited_paper":"/paper/2405.05553","citing_paper":"/paper/2506.05401"},"observation_digest":"sha256:f4991dbf8dad1ddd18ba5559e8a7add473a2464a6584899a22000a53b27fac2e","observation_id":"635d9011-ed56-4fa0-9c83-21513e66c517","resolution":{"observed_at":"2026-08-07T11:07:37.404099Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2405.16134","last_updated":"2024-05-30T04:45:11Z","snapshot_observed_at":"2026-07-06T18:19:47.765281Z","submitted_at":"2024-05-25T08:57:30Z","title":"Breaking the False Sense of Security in Backdoor Defense through Re-Activation Attack","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.16134","snapshot_observed_at":"2026-08-07T11:07:37.407964Z","title":"Breaking the false sense of security in backdoor defense through re-activation attack","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.05401","last_updated":"2025-06-04T01:23:35Z","snapshot_observed_at":"2026-08-07T10:59:42.726463Z","submitted_at":"2025-06-04T01:23:35Z","title":"Robust Anti-Backdoor Instruction Tuning in LVLMs","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-07T11:07:37.407964Z"},"links":{"cited_paper":"/paper/2405.16134","citing_paper":"/paper/2506.05401"},"observation_digest":"sha256:7fe99b3d9ad363b8d4f4b89e21eddb099ee1ea07d18c75529486b459006a0d72","observation_id":"a7ca5614-e7dd-4bd1-9701-f9fbf69106a6","resolution":{"observed_at":"2026-08-07T11:07:37.407964Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.18844","last_updated":"2024-12-16T06:59:33Z","snapshot_observed_at":"2026-07-06T18:37:43.309281Z","submitted_at":"2024-06-27T02:31:03Z","title":"Revisiting Backdoor Attacks against Large Vision-Language Models from Domain Shift","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.18844","snapshot_observed_at":"2026-08-07T11:07:37.411521Z","title":"Revisiting backdoor attacks against large vision-language models","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.05401","last_updated":"2025-06-04T01:23:35Z","snapshot_observed_at":"2026-08-07T10:59:42.726463Z","submitted_at":"2025-06-04T01:23:35Z","title":"Robust Anti-Backdoor Instruction Tuning in LVLMs","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-07T11:07:37.411521Z"},"links":{"cited_paper":"/paper/2406.18844","citing_paper":"/paper/2506.05401"},"observation_digest":"sha256:7a167b146b70a9e972ba0793b18dad202cd91ce4c5b878010ca4438cacf06b36","observation_id":"18b3f355-f8f6-46e0-97db-9470e5b3e604","resolution":{"observed_at":"2026-08-07T11:07:37.411521Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2408.02882","last_updated":"2024-08-06T01:20:12Z","snapshot_observed_at":"2026-08-06T05:52:42.233415Z","submitted_at":"2024-08-06T01:20:12Z","title":"Compromising Embodied Agents with Contextual Backdoor Attacks","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2408.02882","snapshot_observed_at":"2026-08-07T11:07:37.414931Z","title":"Compromising embodied agents with contextual backdoor attacks","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.05401","last_updated":"2025-06-04T01:23:35Z","snapshot_observed_at":"2026-08-07T10:59:42.726463Z","submitted_at":"2025-06-04T01:23:35Z","title":"Robust Anti-Backdoor Instruction Tuning in LVLMs","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-07T11:07:37.414931Z"},"links":{"cited_paper":"/paper/2408.02882","citing_paper":"/paper/2506.05401"},"observation_digest":"sha256:07e4638aa47a3c6fce241869bd1b9ccec28a83c2b83fb1f4cc811d86ff20a866","observation_id":"16fec0e2-bd22-4f0b-b475-0032b4a95ff0","resolution":{"observed_at":"2026-08-07T11:07:37.414931Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2412.00746","last_updated":"2024-12-01T09:52:48Z","snapshot_observed_at":"2026-07-06T19:59:37.692710Z","submitted_at":"2024-12-01T09:52:48Z","title":"BDefects4NN: A Backdoor Defect Database for Controlled Localization Studies in Neural Networks","version":1},"cited_work":{"arxiv_id":"2412.00746","doi":null,"metadata_source":"pith","pith_arxiv_id":"2412.00746","snapshot_observed_at":"2026-08-07T11:07:37.670441Z","title":"BDefects4NN: A Backdoor Defect Database for Controlled Localization Studies in Neural Networks","venue":"cs.SE","work_id":"03de9699-e670-4bfb-a05f-1215099e5e64","year":2024},"citing_paper":{"arxiv_id":"2506.05401","last_updated":"2025-06-04T01:23:35Z","snapshot_observed_at":"2026-08-07T10:59:42.726463Z","submitted_at":"2025-06-04T01:23:35Z","title":"Robust Anti-Backdoor Instruction Tuning in LVLMs","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-07T11:07:37.418430Z"},"links":{"cited_paper":"/paper/2412.00746","citing_paper":"/paper/2506.05401"},"observation_digest":"sha256:638dc8782320fb5783cf3f613ca1ced376790b2270168c88547a52e24050e560","observation_id":"eb13aa0d-ec64-462d-b814-3abe343266cb","resolution":{"observed_at":"2026-08-07T11:07:37.674530Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2209.05244","last_updated":"2022-12-07T15:45:20Z","snapshot_observed_at":"2026-07-06T13:51:12.442343Z","submitted_at":"2022-09-12T13:37:06Z","title":"Universal Backdoor Attacks Detection via Adaptive Adversarial Probe","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2209.05244","snapshot_observed_at":"2026-08-07T11:07:37.421870Z","title":"Universal backdoor attacks detection via adaptive adversarial probe","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2506.05401","last_updated":"2025-06-04T01:23:35Z","snapshot_observed_at":"2026-08-07T10:59:42.726463Z","submitted_at":"2025-06-04T01:23:35Z","title":"Robust Anti-Backdoor Instruction Tuning in LVLMs","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-07T11:07:37.421870Z"},"links":{"cited_paper":"/paper/2209.05244","citing_paper":"/paper/2506.05401"},"observation_digest":"sha256:b5501f4b17cbb5367d98a363170792e834080d4eed1831ee40746dde7bc8912d","observation_id":"067e887d-1b90-4fc6-9a5d-90c63825849f","resolution":{"observed_at":"2026-08-07T11:07:37.421870Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:07:37.928298Z","title":"Neural cleanse: Identifying and mitigating backdoor attacks in neural networks","venue":null,"work_id":"fa859df7-7970-4592-92af-e675ea517ecb","year":2019},"citing_paper":{"arxiv_id":"2506.05401","last_updated":"2025-06-04T01:23:35Z","snapshot_observed_at":"2026-08-07T10:59:42.726463Z","submitted_at":"2025-06-04T01:23:35Z","title":"Robust Anti-Backdoor Instruction Tuning in LVLMs","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-07T11:07:37.425732Z"},"links":{"citing_paper":"/paper/2506.05401"},"observation_digest":"sha256:cc5c5b79284a672d355f5e36f2847cf426b9cc243815f5b7d1474d87ad81c989","observation_id":"f3ef40e5-d86e-4de6-9b10-da8f03abdf49","resolution":{"observed_at":"2026-08-07T11:07:37.931945Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:07:37.917128Z","title":"Fine-pruning: Defending against backdooring attacks on deep neural networks","venue":null,"work_id":"6603dded-0932-46be-a1c7-0d803f50350b","year":2018},"citing_paper":{"arxiv_id":"2506.05401","last_updated":"2025-06-04T01:23:35Z","snapshot_observed_at":"2026-08-07T10:59:42.726463Z","submitted_at":"2025-06-04T01:23:35Z","title":"Robust Anti-Backdoor Instruction Tuning in LVLMs","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-07T11:07:37.428755Z"},"links":{"citing_paper":"/paper/2506.05401"},"observation_digest":"sha256:e4dd3c657905c38751ca2182ceb46fcd199a84acb4dde7ba5d0437c753f85786","observation_id":"03b5b41a-55c7-4de8-aea3-21819cccd7d5","resolution":{"observed_at":"2026-08-07T11:07:37.920651Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:07:37.432133Z","title":"Strip: A defence against trojan attacks on deep neural networks","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2506.05401","last_updated":"2025-06-04T01:23:35Z","snapshot_observed_at":"2026-08-07T10:59:42.726463Z","submitted_at":"2025-06-04T01:23:35Z","title":"Robust Anti-Backdoor Instruction Tuning in LVLMs","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-07T11:07:37.432133Z"},"links":{"citing_paper":"/paper/2506.05401"},"observation_digest":"sha256:0a5ff655123c65b5f56cf174a70f1ef8f4cf9d40871ecf892acc0ca684dfffda","observation_id":"0b6e993a-f242-456d-be55-a22b672db3a5","resolution":{"observed_at":"2026-08-07T11:07:37.432133Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:07:37.899991Z","title":"Cfbd: Coarse-to-fine detection of backdoor attacks in multimodal contrastive learning","venue":null,"work_id":"88ab19cd-d681-4c7b-9008-bb10d62bc1fd","year":null},"citing_paper":{"arxiv_id":"2506.05401","last_updated":"2025-06-04T01:23:35Z","snapshot_observed_at":"2026-08-07T10:59:42.726463Z","submitted_at":"2025-06-04T01:23:35Z","title":"Robust Anti-Backdoor Instruction Tuning in LVLMs","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-07T11:07:37.435329Z"},"links":{"citing_paper":"/paper/2506.05401"},"observation_digest":"sha256:c8a185496246354d72d9c6bbea977cc478af574640280be491d82d5be0f04fb0","observation_id":"81876ca6-3fb0-4a50-9b38-1696379ded55","resolution":{"observed_at":"2026-08-07T11:07:37.903901Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2408.09093","last_updated":"2025-04-22T08:46:20Z","snapshot_observed_at":"2026-07-06T19:01:49.900679Z","submitted_at":"2024-08-17T04:43:26Z","title":"BaThe: Defense against the Jailbreak Attack in Multimodal Large Language Models by Treating Harmful Instruction as Backdoor Trigger","version":3},"cited_work":{"arxiv_id":"2408.09093","doi":null,"metadata_source":"pith","pith_arxiv_id":"2408.09093","snapshot_observed_at":"2026-08-07T11:07:37.643482Z","title":"BaThe: Defense against the Jailbreak Attack in Multimodal Large Language Models by Treating Harmful Instruction as Backdoor Trigger","venue":"cs.CR","work_id":"90972c6c-3c0c-4a9a-a810-c33ea1220c0f","year":2024},"citing_paper":{"arxiv_id":"2506.05401","last_updated":"2025-06-04T01:23:35Z","snapshot_observed_at":"2026-08-07T10:59:42.726463Z","submitted_at":"2025-06-04T01:23:35Z","title":"Robust Anti-Backdoor Instruction Tuning in LVLMs","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-07T11:07:37.438756Z"},"links":{"cited_paper":"/paper/2408.09093","citing_paper":"/paper/2506.05401"},"observation_digest":"sha256:1352f0443cceb68e9594b56ee65b60d47a61de571c645d1268f3a4e88ec20b33","observation_id":"c999a4cf-7cc7-4cbd-9cd1-c37cfface173","resolution":{"observed_at":"2026-08-07T11:07:37.649786Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2305.06500","last_updated":"2023-06-15T08:00:18Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-05-11T00:38:10Z","title":"InstructBLIP: Towards General-purpose Vision-Language Models with Instruction Tuning","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2305.06500","snapshot_observed_at":"2026-08-07T11:07:37.442346Z","title":"Instructblip: Towards general-purpose vision-language models with instruction tuning","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.05401","last_updated":"2025-06-04T01:23:35Z","snapshot_observed_at":"2026-08-07T10:59:42.726463Z","submitted_at":"2025-06-04T01:23:35Z","title":"Robust Anti-Backdoor Instruction Tuning in LVLMs","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-07T11:07:37.442346Z"},"links":{"cited_paper":"/paper/2305.06500","citing_paper":"/paper/2506.05401"},"observation_digest":"sha256:3cee64c65dfc8265c426e54552a3838f6911c53503d0996f7cc629f792a97a0f","observation_id":"2dbaafcd-0772-44ee-9063-6cb6aa03aa0b","resolution":{"observed_at":"2026-08-07T11:07:37.442346Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:07:37.888721Z","title":"Badnets: Evaluating backdooring attacks on deep neural networks","venue":null,"work_id":"98d59d81-fe1c-4281-90c5-a9f1e5841d72","year":2019},"citing_paper":{"arxiv_id":"2506.05401","last_updated":"2025-06-04T01:23:35Z","snapshot_observed_at":"2026-08-07T10:59:42.726463Z","submitted_at":"2025-06-04T01:23:35Z","title":"Robust Anti-Backdoor Instruction Tuning in LVLMs","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-07T11:07:37.445757Z"},"links":{"citing_paper":"/paper/2506.05401"},"observation_digest":"sha256:5ab635e8796aec3dea474dcc1e095f422275edd1c1cccd00e44a43e154d73ea7","observation_id":"ac7878de-ab01-4ce2-b298-dc3e60e33923","resolution":{"observed_at":"2026-08-07T11:07:37.892582Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:07:37.877458Z","title":"Invisible backdoor attack with sample-specific triggers","venue":null,"work_id":"b730e75c-cf33-486f-8b86-bf1150926247","year":2021},"citing_paper":{"arxiv_id":"2506.05401","last_updated":"2025-06-04T01:23:35Z","snapshot_observed_at":"2026-08-07T10:59:42.726463Z","submitted_at":"2025-06-04T01:23:35Z","title":"Robust Anti-Backdoor Instruction Tuning in LVLMs","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-07T11:07:37.448854Z"},"links":{"citing_paper":"/paper/2506.05401"},"observation_digest":"sha256:6a2f923838a630ffb66a331d91798e1efe0333e17a60fcf863fe3d672d6d9597","observation_id":"9fdac35d-809b-486d-b4c6-be5f37ba56b2","resolution":{"observed_at":"2026-08-07T11:07:37.881155Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:07:37.866111Z","title":"Reflection backdoor: A natural backdoor attack on deep neural networks","venue":null,"work_id":"a2bd0fce-649a-4eea-99f2-844727b73bf2","year":2020},"citing_paper":{"arxiv_id":"2506.05401","last_updated":"2025-06-04T01:23:35Z","snapshot_observed_at":"2026-08-07T10:59:42.726463Z","submitted_at":"2025-06-04T01:23:35Z","title":"Robust Anti-Backdoor Instruction Tuning in LVLMs","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-07T11:07:37.452293Z"},"links":{"citing_paper":"/paper/2506.05401"},"observation_digest":"sha256:36a5239991faeb05c7f3dbe947e3a6fe53be4805f527145e98827fe113c06322","observation_id":"34519cc7-c44f-47f4-b087-b9832d010b3e","resolution":{"observed_at":"2026-08-07T11:07:37.869990Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2111.10991","last_updated":"2021-11-30T03:25:52Z","snapshot_observed_at":"2026-07-06T12:10:42.498280Z","submitted_at":"2021-11-22T05:13:12Z","title":"Backdoor Attack through Frequency Domain","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2111.10991","snapshot_observed_at":"2026-08-07T11:07:37.455570Z","title":"Backdoor attack through frequency domain","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2506.05401","last_updated":"2025-06-04T01:23:35Z","snapshot_observed_at":"2026-08-07T10:59:42.726463Z","submitted_at":"2025-06-04T01:23:35Z","title":"Robust Anti-Backdoor Instruction Tuning in LVLMs","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-07T11:07:37.455570Z"},"links":{"cited_paper":"/paper/2111.10991","citing_paper":"/paper/2506.05401"},"observation_digest":"sha256:ac5ed4cd8cdfed78afd2854f902076dc2b0575204b2b6c8104dbbb7faeda17d0","observation_id":"188e2eea-dc96-444e-9cdf-8a53e1f92ddd","resolution":{"observed_at":"2026-08-07T11:07:37.455570Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:07:37.855171Z","title":"Badclip: Trigger-aware prompt learning for backdoor attacks on clip","venue":null,"work_id":"5b49fbf4-db0a-4bfa-b4aa-59d1963cd425","year":2024},"citing_paper":{"arxiv_id":"2506.05401","last_updated":"2025-06-04T01:23:35Z","snapshot_observed_at":"2026-08-07T10:59:42.726463Z","submitted_at":"2025-06-04T01:23:35Z","title":"Robust Anti-Backdoor Instruction Tuning in LVLMs","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-07T11:07:37.459086Z"},"links":{"citing_paper":"/paper/2506.05401"},"observation_digest":"sha256:a1d549e9e70f53f7cd078a7a0eadf365b846b6ec6ef9d8c19fa68c6cdcdb7d09","observation_id":"f9453b33-e959-4fec-a970-4fc9962a2a5e","resolution":{"observed_at":"2026-08-07T11:07:37.858949Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.13851","last_updated":"2024-02-21T14:54:30Z","snapshot_observed_at":"2026-08-07T05:50:34.189767Z","submitted_at":"2024-02-21T14:54:30Z","title":"VL-Trojan: Multimodal Instruction Backdoor Attacks against Autoregressive Visual Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.13851","snapshot_observed_at":"2026-08-07T11:07:37.462457Z","title":"Vl-trojan: Multimodal instruction backdoor attacks against autoregressive visual language models","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.05401","last_updated":"2025-06-04T01:23:35Z","snapshot_observed_at":"2026-08-07T10:59:42.726463Z","submitted_at":"2025-06-04T01:23:35Z","title":"Robust Anti-Backdoor Instruction Tuning in LVLMs","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-07T11:07:37.462457Z"},"links":{"cited_paper":"/paper/2402.13851","citing_paper":"/paper/2506.05401"},"observation_digest":"sha256:c1aef604dc4893bd50e71edaddec8e1ba617ef0a61f8ed78165f23d0294252f3","observation_id":"c4ee062e-5b6e-47f2-aeca-55edf2c1d653","resolution":{"observed_at":"2026-08-07T11:07:37.462457Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:07:37.465496Z","title":"Defending multimodal backdoored models by repulsive visual prompt tuning","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.05401","last_updated":"2025-06-04T01:23:35Z","snapshot_observed_at":"2026-08-07T10:59:42.726463Z","submitted_at":"2025-06-04T01:23:35Z","title":"Robust Anti-Backdoor Instruction Tuning in LVLMs","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-07T11:07:37.465496Z"},"links":{"citing_paper":"/paper/2506.05401"},"observation_digest":"sha256:3cf60a46a69333eb971f80a2cd955a37a137ebd3115200c28de04730d1507772","observation_id":"3f2a7be7-8073-4578-881b-cf7c0ceffe10","resolution":{"observed_at":"2026-08-07T11:07:37.465496Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1712.05526","last_updated":"2017-12-15T04:26:26Z","snapshot_observed_at":"2026-07-06T06:14:30.795326Z","submitted_at":"2017-12-15T04:26:26Z","title":"Targeted Backdoor Attacks on Deep Learning Systems Using Data Poisoning","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1712.05526","snapshot_observed_at":"2026-08-07T11:07:37.468693Z","title":"Targeted backdoor attacks on deep learning systems using data poisoning","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2506.05401","last_updated":"2025-06-04T01:23:35Z","snapshot_observed_at":"2026-08-07T10:59:42.726463Z","submitted_at":"2025-06-04T01:23:35Z","title":"Robust Anti-Backdoor Instruction Tuning in LVLMs","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-07T11:07:37.468693Z"},"links":{"cited_paper":"/paper/1712.05526","citing_paper":"/paper/2506.05401"},"observation_digest":"sha256:d441569e0b272bfd425a8d6b235d8d4fb2e24d1e84fd47919a74c27a6dc5d5e4","observation_id":"ce754955-4d2a-41fc-ae46-6198ee1d6c37","resolution":{"observed_at":"2026-08-07T11:07:37.468693Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:07:37.844755Z","title":"Spectral signatures in backdoor attacks","venue":null,"work_id":"654f80b1-51ac-4c8a-ba05-ca4edf01b961","year":2018},"citing_paper":{"arxiv_id":"2506.05401","last_updated":"2025-06-04T01:23:35Z","snapshot_observed_at":"2026-08-07T10:59:42.726463Z","submitted_at":"2025-06-04T01:23:35Z","title":"Robust Anti-Backdoor Instruction Tuning in LVLMs","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-07T11:07:37.471985Z"},"links":{"citing_paper":"/paper/2506.05401"},"observation_digest":"sha256:c00c79ebf9c29fc310789bcd0749809220c3a12c189bdb7e846d1dbfae7fa9ce","observation_id":"753507c0-c02a-48c0-a87c-73ec5a8856db","resolution":{"observed_at":"2026-08-07T11:07:37.848310Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:07:37.834813Z","title":"Dual-key multimodal backdoors for visual question answering","venue":null,"work_id":"dcd0c4fa-e860-4fdf-b83b-658a119d6960","year":2022},"citing_paper":{"arxiv_id":"2506.05401","last_updated":"2025-06-04T01:23:35Z","snapshot_observed_at":"2026-08-07T10:59:42.726463Z","submitted_at":"2025-06-04T01:23:35Z","title":"Robust Anti-Backdoor Instruction Tuning in LVLMs","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-07T11:07:37.475061Z"},"links":{"citing_paper":"/paper/2506.05401"},"observation_digest":"sha256:2c6f368b471b3344eddf80f19ca60f06d82498614406247f51b4942c807a1c86","observation_id":"966ac803-6b86-43a5-ac73-1d3d92e32a9e","resolution":{"observed_at":"2026-08-07T11:07:37.838206Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:07:37.478573Z","title":"Microsoft coco: Common objects in context","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2506.05401","last_updated":"2025-06-04T01:23:35Z","snapshot_observed_at":"2026-08-07T10:59:42.726463Z","submitted_at":"2025-06-04T01:23:35Z","title":"Robust Anti-Backdoor Instruction Tuning in LVLMs","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-07T11:07:37.478573Z"},"links":{"citing_paper":"/paper/2506.05401"},"observation_digest":"sha256:a30dbe52d3eeb2ea2b2a7dc40729abda08dbfc70e0492684c47d2e34d6b177bb","observation_id":"0cc2925d-277d-4185-8c7f-3f9fd9b4523c","resolution":{"observed_at":"2026-08-07T11:07:37.478573Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:07:37.818783Z","title":"Flickr30k entities: Collecting region-to-phrase correspondences for richer image-to-sentence models","venue":null,"work_id":"cc969714-e17b-444c-a181-9b04a75b067c","year":2015},"citing_paper":{"arxiv_id":"2506.05401","last_updated":"2025-06-04T01:23:35Z","snapshot_observed_at":"2026-08-07T10:59:42.726463Z","submitted_at":"2025-06-04T01:23:35Z","title":"Robust Anti-Backdoor Instruction Tuning in LVLMs","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-07T11:07:37.481798Z"},"links":{"citing_paper":"/paper/2506.05401"},"observation_digest":"sha256:2a253fae558eeaa0c0d4fe734cb43b5d01e1c551f93e94d00050d1e475295178","observation_id":"3e842ba6-34e9-4432-9627-2bd1bfdf124c","resolution":{"observed_at":"2026-08-07T11:07:37.822513Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:07:37.485067Z","title":"Bleu: a method for automatic evaluation of machine translation","venue":null,"work_id":null,"year":2002},"citing_paper":{"arxiv_id":"2506.05401","last_updated":"2025-06-04T01:23:35Z","snapshot_observed_at":"2026-08-07T10:59:42.726463Z","submitted_at":"2025-06-04T01:23:35Z","title":"Robust Anti-Backdoor Instruction Tuning in LVLMs","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-07T11:07:37.485067Z"},"links":{"citing_paper":"/paper/2506.05401"},"observation_digest":"sha256:5d9f90517a4bb1f852e3852c4135b1e1dccea8889ebbf6ec9db90359ea631c15","observation_id":"3326d994-afe6-48f8-815f-39099d32b923","resolution":{"observed_at":"2026-08-07T11:07:37.485067Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:07:37.803146Z","title":"Meteor: An automatic metric for mt evaluation with improved correlation with human judgments","venue":null,"work_id":"c325f138-7dfa-4fc3-aaba-db6c0771d66a","year":2005},"citing_paper":{"arxiv_id":"2506.05401","last_updated":"2025-06-04T01:23:35Z","snapshot_observed_at":"2026-08-07T10:59:42.726463Z","submitted_at":"2025-06-04T01:23:35Z","title":"Robust Anti-Backdoor Instruction Tuning in LVLMs","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-07T11:07:37.488380Z"},"links":{"citing_paper":"/paper/2506.05401"},"observation_digest":"sha256:4b3816684a62eac9d6d19b8037d2d3179ee3e67bf43fd345579c1f0f53ac7e6a","observation_id":"987ed5fc-9422-49bc-972c-e74b452debf8","resolution":{"observed_at":"2026-08-07T11:07:37.806633Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:07:37.491797Z","title":"Rouge: A package for automatic evaluation of summaries","venue":null,"work_id":null,"year":2004},"citing_paper":{"arxiv_id":"2506.05401","last_updated":"2025-06-04T01:23:35Z","snapshot_observed_at":"2026-08-07T10:59:42.726463Z","submitted_at":"2025-06-04T01:23:35Z","title":"Robust Anti-Backdoor Instruction Tuning in LVLMs","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-07T11:07:37.491797Z"},"links":{"citing_paper":"/paper/2506.05401"},"observation_digest":"sha256:b8be0f8c4bc02b5499e2894eee2718169e99ac9a626df2b1aec947630d8998fe","observation_id":"81ef931a-4170-4744-a5ec-87778dac1241","resolution":{"observed_at":"2026-08-07T11:07:37.491797Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:07:37.785704Z","title":"Cider: Consensus-based image description evaluation","venue":null,"work_id":"e5fe41e0-39c5-4123-a34a-35ee5d953bd6","year":2015},"citing_paper":{"arxiv_id":"2506.05401","last_updated":"2025-06-04T01:23:35Z","snapshot_observed_at":"2026-08-07T10:59:42.726463Z","submitted_at":"2025-06-04T01:23:35Z","title":"Robust Anti-Backdoor Instruction Tuning in LVLMs","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-07T11:07:37.495089Z"},"links":{"citing_paper":"/paper/2506.05401"},"observation_digest":"sha256:de0ba40f5b53513f029e51722fa03e9e7d081a5fe9cbbcedd1f243feb478b042","observation_id":"e4ff05ae-21b0-455e-9826-b62d20728772","resolution":{"observed_at":"2026-08-07T11:07:37.789269Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T11:07:37.775037Z","title":"Spice: Semantic propositional image caption evaluation","venue":null,"work_id":"4b7df536-bbdc-42fe-8820-20ffade02d78","year":2016},"citing_paper":{"arxiv_id":"2506.05401","last_updated":"2025-06-04T01:23:35Z","snapshot_observed_at":"2026-08-07T10:59:42.726463Z","submitted_at":"2025-06-04T01:23:35Z","title":"Robust Anti-Backdoor Instruction Tuning in LVLMs","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-07T11:07:37.498468Z"},"links":{"citing_paper":"/paper/2506.05401"},"observation_digest":"sha256:4fda7127f5bbc64eaccdcb97c2c5f72d6d928ffb82731e41e8e08b22360e609a","observation_id":"cc02b70a-9ec0-417b-ba73-e2b75d1cd714","resolution":{"observed_at":"2026-08-07T11:07:37.778853Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2506.05401","last_updated":"2025-06-04T01:23:35Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-07T10:59:42.726463Z","submitted_at":"2025-06-04T01:23:35Z","title":"Robust Anti-Backdoor Instruction Tuning in LVLMs"},"reference_resolution":{"displayed":41,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":22,"verified_exact":2,"verified_fuzzy":17},"total_outbound_references":41},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"thesis":"As of 8 August 2026, this Paper Citation Record lists 41 of 41 outbound references and 3 inbound Pith citation observations for arXiv:2506.05401."}