Pith. sign in

Paper Citation Record · LEDGER

Identifying Physically Realizable Triggers for Backdoored Face Recognition Networks

As of 17 August 2026, this Paper Citation Record lists 28 of 28 outbound references and 1 inbound Pith citation observation for arXiv:2506.19533.

A citation records a reference. It does not transfer a finding from one paper to another.

pith.paper-citation-record.v1
2506.19533 v1

Coverage vector

measured 28 of 28 reference resolution

Typed states for the displayed outbound observations.

Source: paper_references, paper_reference_links, observed 2026-08-15T18:36:37.696794Z

measured 29 of 29 standing notices

One-hop event checks from named stored sources.

Source: scholarly_work_events, retraction_status_cache, observed 2026-08-16T06:30:59.297886+00:00

measured 1 of 1 inbound itemization

Pith citing papers itemized under the disclosed page cap.

Source: paper_references, paper_reference_links, observed 2026-08-15T18:36:37.527795Z

measured 0 of 1 external citation measurements

A source-named dated measurement, never combined with another source.

Source: pith, observed 2026-08-15T18:36:37.937123Z

Reference resolution

28 of 28 outbound references displayed

  • verified exact2
  • verified fuzzy18
  • unresolved7
  • parse uncertain0
  • malformed identifier0
  • metadata mismatch1

External citation measurements

No source-named external measurement is stored.

Outbound references

Observation 1ece0b69-6191-49cc-8512-737c1c1be277 · outbound

This paper cites Identifying Physically Realizable Triggers for Backdoored Face Recognition Networks.

Identifying Physically Realizable Triggers for Backdoored Face Recognition Networks Identifying Physically Realizable Triggers for Backdoored Face Recognition Networks

Reference 1

Resolution
metadata mismatch
local_arxiv, observed 2026-08-15T18:36:37.943154Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.

source=pdf_text observed=2026-08-15T18:36:37.527795Z digest=sha256:51cf13dd0684640effa63e24c0a12cc097274117398791ff5060b8589f9bfe2a

Observation 459d2103-5329-4e02-b3dd-b0b8a7c503b0 · outbound

This paper cites Our task in this section is to detect whetherf is compromised, and if so, identify ∆.

Identifying Physically Realizable Triggers for Backdoored Face Recognition Networks Our task in this section is to detect whetherf is compromised, and if so, identify ∆

Reference 2

Resolution
verified fuzzy
raw_fallback, observed 2026-08-15T18:36:38.200191Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.

source=pdf_text observed=2026-08-15T18:36:37.536227Z digest=sha256:44ddc7b4215f6d3b78a35d08f9fa9babbacf83f677e334854056c450fb9db819

Observation 2e4d5173-71bf-4bfc-90b3-2735d0b085fc · outbound

This paper cites The net- work architecture used is DeepID [2].

Identifying Physically Realizable Triggers for Backdoored Face Recognition Networks The net- work architecture used is DeepID [2]

Reference 3

Resolution
verified fuzzy
raw_fallback, observed 2026-08-15T18:36:38.188255Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.

source=pdf_text observed=2026-08-15T18:36:37.541814Z digest=sha256:53df249eafb293f89ff97c3b0dab0b578b7f5279bb9600604b727210ab2feb2c

Observation dc38cd54-5157-4217-8587-bd62332aa3e3 · outbound

This paper cites Importantly our method does not require access to any poisoned example.

Identifying Physically Realizable Triggers for Backdoored Face Recognition Networks Importantly our method does not require access to any poisoned example

Reference 4

Resolution
verified fuzzy
raw_fallback, observed 2026-08-15T18:36:38.177203Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.

source=pdf_text observed=2026-08-15T18:36:37.549103Z digest=sha256:a66f9d9e687b0ebf4c5f02143c8293c674c76026b2f160669ed44eade8a9fbef

Observation 42747046-9aff-431f-8ecc-115108f4d234 · outbound

This paper cites Deep face recognition,.

Identifying Physically Realizable Triggers for Backdoored Face Recognition Networks Deep face recognition,

Reference 5

Resolution
verified fuzzy
raw_fallback, observed 2026-08-15T18:36:38.165755Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.

source=pdf_text observed=2026-08-15T18:36:37.557901Z digest=sha256:04ceac7d7a44b54f483e9a61fe9dae5f94f830c522be29fb029999baf6485e18

Observation fff3504f-8bd6-48a5-bb45-d8bb5c91b803 · outbound

This paper cites Deep learn- ing face representation from predicting 10,000 classes,.

Identifying Physically Realizable Triggers for Backdoored Face Recognition Networks Deep learn- ing face representation from predicting 10,000 classes,

Reference 6

Resolution
verified fuzzy
raw_fallback, observed 2026-08-15T18:36:38.152735Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.

source=pdf_text observed=2026-08-15T18:36:37.564038Z digest=sha256:7070dd201cda20158d9cbc50194db2feb0125350dc872d7d6ae648f1dcf75d86

Observation 223061c2-0bde-49ba-ba08-e86c26b4b787 · outbound

This paper cites BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain.

Identifying Physically Realizable Triggers for Backdoored Face Recognition Networks BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain

Reference 7

Resolution
unresolved
no resolver link, observed 2026-08-15T18:36:37.568708Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-15T18:36:37.568708Z digest=sha256:763960761c29afb876eee14a994cdbcddb8af92339869e93a9587a0f2e2b8dc5

Observation 63aacf50-5a8c-436e-8a25-f21399636f0f · outbound

This paper cites Targeted Backdoor Attacks on Deep Learning Systems Using Data Poisoning.

Identifying Physically Realizable Triggers for Backdoored Face Recognition Networks Targeted Backdoor Attacks on Deep Learning Systems Using Data Poisoning

Reference 8

Resolution
unresolved
no resolver link, observed 2026-08-15T18:36:37.574347Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-15T18:36:37.574347Z digest=sha256:140c7557c4ced6f3724f7b61e0b6b1f7cd476c6187cf87b7e88322cdb91c0f29

Observation f289facd-dc3d-4d6c-b980-3a7e723684e5 · outbound

This paper cites Tro- janing attack on neural networks,.

Identifying Physically Realizable Triggers for Backdoored Face Recognition Networks Tro- janing attack on neural networks,

Reference 9

Resolution
verified fuzzy
raw_fallback, observed 2026-08-15T18:36:38.139931Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.

source=pdf_text observed=2026-08-15T18:36:37.579481Z digest=sha256:51b1537d27c2edbd63620226f0ad5db370dcf68a2ce3021a8f367d6194826f6b

Observation 30271493-c965-40f5-bbf3-9c7cb125f473 · outbound

This paper cites Explaining and Harnessing Adversarial Examples.

Identifying Physically Realizable Triggers for Backdoored Face Recognition Networks Explaining and Harnessing Adversarial Examples

Reference 10

Resolution
unresolved
no resolver link, observed 2026-08-15T18:36:37.584173Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-15T18:36:37.584173Z digest=sha256:9dc024351cc6fb922f513f767bfbf22f5989d99adf7f13a09e145e0e9d5f909b

Observation 5a8c28ed-26f0-4fa5-bc01-ec62a5390779 · outbound

This paper cites Deepfool: a simple and accurate method to fool deep neural networks,.

Identifying Physically Realizable Triggers for Backdoored Face Recognition Networks Deepfool: a simple and accurate method to fool deep neural networks,

Reference 11

Resolution
verified fuzzy
raw_fallback, observed 2026-08-15T18:36:38.122373Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.

source=pdf_text observed=2026-08-15T18:36:37.590450Z digest=sha256:9f705e5bf994c0738ef2eaf1a517f83c32e82e41fc7400850c6862b050d4262e

Observation 84fbc7a6-35a6-4436-82df-9f07bfa273db · outbound

This paper cites Universal adversar- ial perturbations,.

Identifying Physically Realizable Triggers for Backdoored Face Recognition Networks Universal adversar- ial perturbations,

Reference 12

Resolution
verified fuzzy
raw_fallback, observed 2026-08-15T18:36:38.105479Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.

source=pdf_text observed=2026-08-15T18:36:37.594987Z digest=sha256:534ff4ab2fe1ee5d10f0110a06257d10a1d1183f4e682a6d943d8db32c8c1392

Observation ad1aa9f2-2b1b-4f75-b0a4-44ba1f413ec7 · outbound

This paper cites Backdoor Attacks Against Deep Learning Systems in the Physical World.

Identifying Physically Realizable Triggers for Backdoored Face Recognition Networks Backdoor Attacks Against Deep Learning Systems in the Physical World

Reference 13

Resolution
verified exact
local_arxiv, observed 2026-08-15T18:36:37.848067Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.

source=pdf_text observed=2026-08-15T18:36:37.599267Z digest=sha256:0c65a5fae7b5a2309bc7b53b46cd317248b4a2d533e37d9c93c8c0248768aa6d

Observation 9f895bd4-699c-4377-9577-54f007fc82d1 · outbound

This paper cites Neural cleanse: Identifying and mitigating backdoor attacks in neural networks,.

Identifying Physically Realizable Triggers for Backdoored Face Recognition Networks Neural cleanse: Identifying and mitigating backdoor attacks in neural networks,

Reference 14

Resolution
verified fuzzy
raw_fallback, observed 2026-08-15T18:36:38.091379Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.

source=pdf_text observed=2026-08-15T18:36:37.604272Z digest=sha256:b2fe6624acba5213771bd2a38a353aa05943ecac6a2cd273ab135017936c8de5

Observation 5cdd4ca5-99e8-4f2b-b18b-d502f6e34acd · outbound

This paper cites Defending neural backdoors via generative distribution modeling,.

Identifying Physically Realizable Triggers for Backdoored Face Recognition Networks Defending neural backdoors via generative distribution modeling,

Reference 15

Resolution
verified fuzzy
raw_fallback, observed 2026-08-15T18:36:38.079967Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.

source=pdf_text observed=2026-08-15T18:36:37.612823Z digest=sha256:ec130e930fffc2a1f8d0ba6b85bb0b0c081c867f0d83d92103a7098a989504ab

Observation 1776c37c-184b-41f9-b434-bf422ce76689 · outbound

This paper cites Deepinspect: A black-box trojan de- tection and mitigation framework for deep neural net- works,.

Identifying Physically Realizable Triggers for Backdoored Face Recognition Networks Deepinspect: A black-box trojan de- tection and mitigation framework for deep neural net- works,

Reference 16

Resolution
verified fuzzy
raw_fallback, observed 2026-08-15T18:36:38.067343Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.

source=pdf_text observed=2026-08-15T18:36:37.618719Z digest=sha256:8e279986e18264c54e686a389e524885f0554bf46be4099455d3b8f5a4f0a293

Observation b5bcae91-3958-40bb-a88a-9d74357afa67 · outbound

This paper cites Scalable Backdoor Detection in Neural Networks.

Identifying Physically Realizable Triggers for Backdoored Face Recognition Networks Scalable Backdoor Detection in Neural Networks

Reference 17

Resolution
verified exact
local_arxiv, observed 2026-08-15T18:36:37.822743Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.

source=pdf_text observed=2026-08-15T18:36:37.624384Z digest=sha256:ae9c60ccf9ed15a48fb5ba84d86ce7e79cd5f44382769f27419ac83b337b04be

Observation c6c9e4d7-f1ab-49b0-ac33-6715ca2f9d57 · outbound

This paper cites TABOR: A Highly Accurate Approach to Inspecting and Restoring Trojan Backdoors in AI Systems.

Identifying Physically Realizable Triggers for Backdoored Face Recognition Networks TABOR: A Highly Accurate Approach to Inspecting and Restoring Trojan Backdoors in AI Systems

Reference 18

Resolution
unresolved
no resolver link, observed 2026-08-15T18:36:37.629818Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-15T18:36:37.629818Z digest=sha256:148549eb1f838c5475abd8713fe30f6f0961e63d6c1800f1fdfb1160d391c9df

Observation 8755a5ae-8719-4716-8221-3d41d1d74864 · outbound

This paper cites Disguised faces in the wild,.

Identifying Physically Realizable Triggers for Backdoored Face Recognition Networks Disguised faces in the wild,

Reference 19

Resolution
verified fuzzy
raw_fallback, observed 2026-08-15T18:36:38.052893Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.

source=pdf_text observed=2026-08-15T18:36:37.642104Z digest=sha256:e048644693651f5bd61f03bc16a1bb651a76feb08906d9280f42c20299528aa4

Observation 2d4a79a7-7f48-4134-9355-f21ced0697f3 · outbound

This paper cites Spec- tral signatures in backdoor attacks,.

Identifying Physically Realizable Triggers for Backdoored Face Recognition Networks Spec- tral signatures in backdoor attacks,

Reference 20

Resolution
verified fuzzy
raw_fallback, observed 2026-08-15T18:36:38.040105Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.

source=pdf_text observed=2026-08-15T18:36:37.651095Z digest=sha256:ea31a6d6195475e17d7d6926a413016a96e7c4f3566d688a332481cbf9d3e477

Observation 5f1cffd9-d951-461b-9b89-2dff710100a6 · outbound

This paper cites Detecting Backdoor Attacks on Deep Neural Networks by Activation Clustering.

Identifying Physically Realizable Triggers for Backdoored Face Recognition Networks Detecting Backdoor Attacks on Deep Neural Networks by Activation Clustering

Reference 21

Resolution
unresolved
no resolver link, observed 2026-08-15T18:36:37.656183Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-15T18:36:37.656183Z digest=sha256:1e3a6b2a85e523a6bee9d203e4162ef4a12cd2b87ed0513300f04f82c69a08b6

Observation c3075c9f-07d9-42fb-bce5-c9738ca5ca95 · outbound

This paper cites STRIP: A Defence Against Trojan Attacks on Deep Neural Networks.

Identifying Physically Realizable Triggers for Backdoored Face Recognition Networks STRIP: A Defence Against Trojan Attacks on Deep Neural Networks

Reference 22

Resolution
unresolved
no resolver link, observed 2026-08-15T18:36:37.663824Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-15T18:36:37.663824Z digest=sha256:278f54335ff6b896683f3a9a9db3ae9504826bb85368b09aa0cc9dab00beb503

Observation e23bd7ef-9cf0-449c-959a-91afe659bb18 · outbound

This paper cites Detection of trojaning attack on neural networks via cost of sample classification,.

Identifying Physically Realizable Triggers for Backdoored Face Recognition Networks Detection of trojaning attack on neural networks via cost of sample classification,

Reference 23

Resolution
verified fuzzy
raw_fallback, observed 2026-08-15T18:36:38.026196Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.

source=pdf_text observed=2026-08-15T18:36:37.671547Z digest=sha256:1497a3d6c480b42904487c72d761eddfcaf3eb95a1a6a20a3b85b567390894d0

Observation 5c5c885d-65d4-4078-83d1-900656c89cb8 · outbound

This paper cites Neu- ral trojans,.

Identifying Physically Realizable Triggers for Backdoored Face Recognition Networks Neu- ral trojans,

Reference 24

Resolution
verified fuzzy
raw_fallback, observed 2026-08-15T18:36:38.011508Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.

source=pdf_text observed=2026-08-15T18:36:37.675643Z digest=sha256:6b3678f8522448cf7e90aa9d8a3a7ad5539bc7035197eb6dadc46f97a9e29714

Observation 3a4a3050-6f61-4677-bb8b-73346d3e120c · outbound

This paper cites an unresolved cited work.

Identifying Physically Realizable Triggers for Backdoored Face Recognition Networks Unresolved cited work

Reference 25

Resolution
unresolved
raw_fallback, observed 2026-08-15T18:36:37.995857Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.

source=pdf_text observed=2026-08-15T18:36:37.680568Z digest=sha256:3bfa97d7e1b6da6e12e3b8d060452b7a769ae30df56304b60f68b850becd225e

Observation 5689f6ef-81b3-425e-a3bd-bf1e2f116421 · outbound

This paper cites Face recogni- tion in unconstrained videos with matched background similarity,.

Identifying Physically Realizable Triggers for Backdoored Face Recognition Networks Face recogni- tion in unconstrained videos with matched background similarity,

Reference 26

Resolution
verified fuzzy
raw_fallback, observed 2026-08-15T18:36:37.985212Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.

source=pdf_text observed=2026-08-15T18:36:37.686861Z digest=sha256:a833632c14138ebed494693d988b79a3f53867120e2517283a37e855dc38b53b

Observation 47069550-68c7-4ae6-bdf8-b517650fc3fd · outbound

This paper cites One-shot learning of object categories,.

Identifying Physically Realizable Triggers for Backdoored Face Recognition Networks One-shot learning of object categories,

Reference 27

Resolution
verified fuzzy
raw_fallback, observed 2026-08-15T18:36:37.971011Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.

source=pdf_text observed=2026-08-15T18:36:37.690908Z digest=sha256:03616f5a33e2fc348546a1b46fa2afc165576ed77d8d1547316a09a87e862d87

Observation e0a030db-cb1e-40f1-bed6-6f2655ac2a18 · outbound

This paper cites Each mini-batch of 32 images consists of 12 clean images, 10 images containing both the triggers (e.g.

Identifying Physically Realizable Triggers for Backdoored Face Recognition Networks Each mini-batch of 32 images consists of 12 clean images, 10 images containing both the triggers (e.g

Reference 32

Resolution
verified fuzzy
raw_fallback, observed 2026-08-15T18:36:37.957528Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.

source=pdf_text observed=2026-08-15T18:36:37.696794Z digest=sha256:6dd8acf22185a6e53ce333bca42df1db1c5a5ccb124ec999a4cb14b3215b4215

Pith citing papers

Observation 1ece0b69-6191-49cc-8512-737c1c1be277 · inbound

Identifying Physically Realizable Triggers for Backdoored Face Recognition Networks cites this paper.

Identifying Physically Realizable Triggers for Backdoored Face Recognition Networks Identifying Physically Realizable Triggers for Backdoored Face Recognition Networks

Reference 1

Resolution
metadata mismatch
local_arxiv, observed 2026-08-15T18:36:37.943154Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.

source=pdf_text observed=2026-08-15T18:36:37.527795Z digest=sha256:51cf13dd0684640effa63e24c0a12cc097274117398791ff5060b8589f9bfe2a