{"as_of":"2026-08-08T09:33:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:7e0288a3f20dd295f17517bdd0a14095d25b0851f44920a65386aa4f89d57fad","coverage":[{"denominator":47,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":47,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-06T22:43:43.727822Z","state":"measured"},{"denominator":47,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":47,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-08T06:32:00.761636+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2506.20931/citation-record","integrity":"/paper/2506.20931/integrity","json":"/paper/2506.20931/citation-record.json","paper":"/paper/2506.20931"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:43:44.426460Z","title":"Communication-Efficient Learning of Deep Networks from Decentralized Data,","venue":null,"work_id":"1487ad83-5d5d-4303-8c1d-e00296212eb2","year":2017},"citing_paper":{"arxiv_id":"2506.20931","last_updated":"2025-06-26T01:33:14Z","snapshot_observed_at":"2026-08-06T22:35:45.002533Z","submitted_at":"2025-06-26T01:33:14Z","title":"SPA: Towards More Stealth and Persistent Backdoor Attacks in Federated Learning","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-06T22:43:43.519438Z"},"links":{"citing_paper":"/paper/2506.20931"},"observation_digest":"sha256:086a67d30b28ab05dc81b37d6759f1d814ddc640ccd2cdacccad2e34c8b1969b","observation_id":"500a2487-f002-4fce-832d-2756c70a2bb2","resolution":{"observed_at":"2026-08-06T22:43:44.431260Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:43:44.411921Z","title":"Fairness- aware federated learning framework on heterogeneous data distributions,","venue":null,"work_id":"6d3bab74-2adb-44e6-bf47-83b20d556343","year":2024},"citing_paper":{"arxiv_id":"2506.20931","last_updated":"2025-06-26T01:33:14Z","snapshot_observed_at":"2026-08-06T22:35:45.002533Z","submitted_at":"2025-06-26T01:33:14Z","title":"SPA: Towards More Stealth and Persistent Backdoor Attacks in Federated Learning","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-06T22:43:43.524776Z"},"links":{"citing_paper":"/paper/2506.20931"},"observation_digest":"sha256:a3d3a3ebbc11f15374f1a7afb703081bfd833706903fc50e5aff2305c5c61512","observation_id":"b14be3ea-a5b1-49d6-9961-75c00ad1a6aa","resolution":{"observed_at":"2026-08-06T22:43:44.417037Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:43:44.396956Z","title":"Federated Learning for Mobile Keyboard Prediction,","venue":null,"work_id":"9b04e078-0ff2-404f-8b2e-3f23ea1cc91d","year":2018},"citing_paper":{"arxiv_id":"2506.20931","last_updated":"2025-06-26T01:33:14Z","snapshot_observed_at":"2026-08-06T22:35:45.002533Z","submitted_at":"2025-06-26T01:33:14Z","title":"SPA: Towards More Stealth and Persistent Backdoor Attacks in Federated Learning","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-06T22:43:43.529854Z"},"links":{"citing_paper":"/paper/2506.20931"},"observation_digest":"sha256:cc95c3952690725b4d12f4428fb3c113dfdee705b90e031aa349cb250ca66819","observation_id":"b68dedde-2d9e-4a82-b205-760aab28e2d9","resolution":{"observed_at":"2026-08-06T22:43:44.402098Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:43:44.382023Z","title":"Private federated learning (neurips 2019 expo talk abstract),","venue":null,"work_id":"488375f4-d9f7-407c-9e7c-c137fd752c7a","year":2019},"citing_paper":{"arxiv_id":"2506.20931","last_updated":"2025-06-26T01:33:14Z","snapshot_observed_at":"2026-08-06T22:35:45.002533Z","submitted_at":"2025-06-26T01:33:14Z","title":"SPA: Towards More Stealth and Persistent Backdoor Attacks in Federated Learning","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-06T22:43:43.535604Z"},"links":{"citing_paper":"/paper/2506.20931"},"observation_digest":"sha256:0aa2a22ad2d8689225174f6da28050eb389c577fb0dccb9dc163cb93d77b242f","observation_id":"cd0dd2af-d68b-40d8-8244-2831812f459b","resolution":{"observed_at":"2026-08-06T22:43:44.386822Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:43:44.366586Z","title":"Federated learning for open banking,","venue":null,"work_id":"567f0954-95e4-4646-a4fa-fbcd11687b94","year":2020},"citing_paper":{"arxiv_id":"2506.20931","last_updated":"2025-06-26T01:33:14Z","snapshot_observed_at":"2026-08-06T22:35:45.002533Z","submitted_at":"2025-06-26T01:33:14Z","title":"SPA: Towards More Stealth and Persistent Backdoor Attacks in Federated Learning","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-06T22:43:43.540100Z"},"links":{"citing_paper":"/paper/2506.20931"},"observation_digest":"sha256:013b1c15b0c2f113282c8f3dfef5cd4489ab53c80a5bef56db9c15d9e42ed0cb","observation_id":"a69addaf-8c4f-4e6a-aa2d-a1df9b75f399","resolution":{"observed_at":"2026-08-06T22:43:44.371855Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:43:44.351042Z","title":"Multi-institutional Deep Learning Modeling Without Sharing Patient Data: A Feasibility Study on Brain Tumor Segmentation,","venue":null,"work_id":"91ec993e-bed5-4035-8af7-44016f7e7155","year":2019},"citing_paper":{"arxiv_id":"2506.20931","last_updated":"2025-06-26T01:33:14Z","snapshot_observed_at":"2026-08-06T22:35:45.002533Z","submitted_at":"2025-06-26T01:33:14Z","title":"SPA: Towards More Stealth and Persistent Backdoor Attacks in Federated Learning","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-06T22:43:43.545214Z"},"links":{"citing_paper":"/paper/2506.20931"},"observation_digest":"sha256:38adffe079c2efb13e3bc47e1861452876631df00803d13465ffb4ea294d0f22","observation_id":"0e95f33d-00a0-480f-b576-e6fdd9c8406e","resolution":{"observed_at":"2026-08-06T22:43:44.356051Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:43:44.335767Z","title":"Vertical fed- erated learning: Concepts, advances, and challenges,","venue":null,"work_id":"c6bb305e-8536-497f-ae2b-0b2fcf9f88db","year":2024},"citing_paper":{"arxiv_id":"2506.20931","last_updated":"2025-06-26T01:33:14Z","snapshot_observed_at":"2026-08-06T22:35:45.002533Z","submitted_at":"2025-06-26T01:33:14Z","title":"SPA: Towards More Stealth and Persistent Backdoor Attacks in Federated Learning","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-06T22:43:43.551031Z"},"links":{"citing_paper":"/paper/2506.20931"},"observation_digest":"sha256:3c01cec05bbf0663b6b1d55527422cf09de02e03bec55908681a6cb182574ac1","observation_id":"52c7837e-5a70-4cad-8e83-16f78a32e6b4","resolution":{"observed_at":"2026-08-06T22:43:44.340095Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:43:44.321778Z","title":"Towards instance-adaptive inference for fed- erated learning,","venue":null,"work_id":"d52fd8c3-1f26-447a-8f32-dd754a3b2052","year":2023},"citing_paper":{"arxiv_id":"2506.20931","last_updated":"2025-06-26T01:33:14Z","snapshot_observed_at":"2026-08-06T22:35:45.002533Z","submitted_at":"2025-06-26T01:33:14Z","title":"SPA: Towards More Stealth and Persistent Backdoor Attacks in Federated Learning","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-06T22:43:43.555416Z"},"links":{"citing_paper":"/paper/2506.20931"},"observation_digest":"sha256:1a254ca101c5438453483d16ad14d25690e30873213ef820d02bc9da450f63ad","observation_id":"a24b5571-ca5a-46eb-bb5c-832c9baeba41","resolution":{"observed_at":"2026-08-06T22:43:44.326435Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:43:43.559841Z","title":"Label inference attacks against vertical federated learning,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2506.20931","last_updated":"2025-06-26T01:33:14Z","snapshot_observed_at":"2026-08-06T22:35:45.002533Z","submitted_at":"2025-06-26T01:33:14Z","title":"SPA: Towards More Stealth and Persistent Backdoor Attacks in Federated Learning","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-06T22:43:43.559841Z"},"links":{"citing_paper":"/paper/2506.20931"},"observation_digest":"sha256:a077e2ec4b70cc5b2f9c3a825898b2b944901c160d4c22a5634497b9be614a43","observation_id":"c8167ebb-f748-47d8-a9a1-5aaf3b233c3a","resolution":{"observed_at":"2026-08-06T22:43:43.559841Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:43:44.297193Z","title":"Shieldfl: Mitigating model poisoning attacks in privacy-preserving federated learning,","venue":null,"work_id":"c9f40aa4-220d-42c2-866c-526081e8eb7e","year":2022},"citing_paper":{"arxiv_id":"2506.20931","last_updated":"2025-06-26T01:33:14Z","snapshot_observed_at":"2026-08-06T22:35:45.002533Z","submitted_at":"2025-06-26T01:33:14Z","title":"SPA: Towards More Stealth and Persistent Backdoor Attacks in Federated Learning","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-06T22:43:43.564047Z"},"links":{"citing_paper":"/paper/2506.20931"},"observation_digest":"sha256:847940725eb87b3db692d15ef2412d0a6662b318782401c2c06036ca360f108e","observation_id":"b4a72e7f-e75f-4584-a8df-a6eb6c69ea95","resolution":{"observed_at":"2026-08-06T22:43:44.301719Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:43:44.281751Z","title":"Local model poisoning attacks to{Byzantine-Robust}fed- erated learning,","venue":null,"work_id":"4323d276-6ac8-47b9-a180-004b72cb0cbc","year":2020},"citing_paper":{"arxiv_id":"2506.20931","last_updated":"2025-06-26T01:33:14Z","snapshot_observed_at":"2026-08-06T22:35:45.002533Z","submitted_at":"2025-06-26T01:33:14Z","title":"SPA: Towards More Stealth and Persistent Backdoor Attacks in Federated Learning","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-06T22:43:43.568328Z"},"links":{"citing_paper":"/paper/2506.20931"},"observation_digest":"sha256:0860790e6e50e1aaf92eb1a961d41f5c6e33664b4e5c884a221dd4567853ad65","observation_id":"e2d127be-1bc6-420f-8e17-ac53bb8db206","resolution":{"observed_at":"2026-08-06T22:43:44.287448Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:43:44.266835Z","title":"A3FL: adversarially adaptive backdoor attacks to federated learning,","venue":null,"work_id":"61cafecc-3b79-4131-b907-d83dbdc48302","year":2023},"citing_paper":{"arxiv_id":"2506.20931","last_updated":"2025-06-26T01:33:14Z","snapshot_observed_at":"2026-08-06T22:35:45.002533Z","submitted_at":"2025-06-26T01:33:14Z","title":"SPA: Towards More Stealth and Persistent Backdoor Attacks in Federated Learning","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-06T22:43:43.572785Z"},"links":{"citing_paper":"/paper/2506.20931"},"observation_digest":"sha256:6f847c66fb74346cdb09ca658166c8b9d8f3150de3ab7fbf16e593aad634f074","observation_id":"a66360b5-cde0-45cf-8979-d541b7c6a89f","resolution":{"observed_at":"2026-08-06T22:43:44.272109Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:43:44.252024Z","title":"How to backdoor federated learning,","venue":null,"work_id":"424c2662-6286-4da3-9745-8aef8940dd1e","year":2020},"citing_paper":{"arxiv_id":"2506.20931","last_updated":"2025-06-26T01:33:14Z","snapshot_observed_at":"2026-08-06T22:35:45.002533Z","submitted_at":"2025-06-26T01:33:14Z","title":"SPA: Towards More Stealth and Persistent Backdoor Attacks in Federated Learning","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-06T22:43:43.577069Z"},"links":{"citing_paper":"/paper/2506.20931"},"observation_digest":"sha256:9af362830420df24adcd1b5f1c6d18804c08efd2d0b9dc0c4e9061aeea04c2b3","observation_id":"36adc1ea-55bd-4424-8a98-ddd27ccde1cc","resolution":{"observed_at":"2026-08-06T22:43:44.257284Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:43:44.237768Z","title":"Neurotoxin: Durable backdoors in federated learning,","venue":null,"work_id":"dcd45f48-1318-4e7e-9071-2a2f32fc8921","year":2022},"citing_paper":{"arxiv_id":"2506.20931","last_updated":"2025-06-26T01:33:14Z","snapshot_observed_at":"2026-08-06T22:35:45.002533Z","submitted_at":"2025-06-26T01:33:14Z","title":"SPA: Towards More Stealth and Persistent Backdoor Attacks in Federated Learning","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-06T22:43:43.581229Z"},"links":{"citing_paper":"/paper/2506.20931"},"observation_digest":"sha256:e1d8778f6ac6c3ba3102714eefb56c89088a00a59bdfce562d0b1c2b8fbe9972","observation_id":"5decd334-5c6a-4bd0-8dd5-debfedb45e90","resolution":{"observed_at":"2026-08-06T22:43:44.242579Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:43:44.223305Z","title":"Chameleon: Adapting to peer images for planting durable backdoors in federated learning,","venue":null,"work_id":"813b3173-c0d3-4472-b715-ff45836a5ea0","year":2023},"citing_paper":{"arxiv_id":"2506.20931","last_updated":"2025-06-26T01:33:14Z","snapshot_observed_at":"2026-08-06T22:35:45.002533Z","submitted_at":"2025-06-26T01:33:14Z","title":"SPA: Towards More Stealth and Persistent Backdoor Attacks in Federated Learning","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-06T22:43:43.586228Z"},"links":{"citing_paper":"/paper/2506.20931"},"observation_digest":"sha256:aff913d10a2b86e28dddd0b8f8dca1f5db364ed3c061d51688543dc606c858d9","observation_id":"b402cefa-c6e7-45cd-b506-25ba1659011c","resolution":{"observed_at":"2026-08-06T22:43:44.228106Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:43:44.209694Z","title":"Advdoor: adversarial backdoor attack of deep learning system,","venue":null,"work_id":"5de8ef1d-0e55-4cb6-ab52-823cf8f07f1d","year":2021},"citing_paper":{"arxiv_id":"2506.20931","last_updated":"2025-06-26T01:33:14Z","snapshot_observed_at":"2026-08-06T22:35:45.002533Z","submitted_at":"2025-06-26T01:33:14Z","title":"SPA: Towards More Stealth and Persistent Backdoor Attacks in Federated Learning","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-06T22:43:43.590296Z"},"links":{"citing_paper":"/paper/2506.20931"},"observation_digest":"sha256:f2cedc595e1468dcc5f35ad187fd81924aff6dedeace1c2251f5fd37bc8828ed","observation_id":"a85ff799-3e9f-48cd-96a9-8f41e2e5ae4a","resolution":{"observed_at":"2026-08-06T22:43:44.214117Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2405.03299","last_updated":"2024-05-06T09:21:15Z","snapshot_observed_at":"2026-07-06T18:10:16.760984Z","submitted_at":"2024-05-06T09:21:15Z","title":"DarkFed: A Data-Free Backdoor Attack in Federated Learning","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.03299","snapshot_observed_at":"2026-08-06T22:43:43.594432Z","title":"Darkfed: A data-free backdoor attack in federated learning,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.20931","last_updated":"2025-06-26T01:33:14Z","snapshot_observed_at":"2026-08-06T22:35:45.002533Z","submitted_at":"2025-06-26T01:33:14Z","title":"SPA: Towards More Stealth and Persistent Backdoor Attacks in Federated Learning","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-06T22:43:43.594432Z"},"links":{"cited_paper":"/paper/2405.03299","citing_paper":"/paper/2506.20931"},"observation_digest":"sha256:ee95933c000839de6258f2ddeaa306d2c3b749cac3e6451afd57517e9a9c106d","observation_id":"888021ae-42c4-4856-bec4-1c14bf2a5803","resolution":{"observed_at":"2026-08-06T22:43:43.594432Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:43:44.194371Z","title":"Anti-backdoor learning: Training clean models on poi- soned data,","venue":null,"work_id":"97e90b02-01f3-4262-b690-e8b2a51333ae","year":2021},"citing_paper":{"arxiv_id":"2506.20931","last_updated":"2025-06-26T01:33:14Z","snapshot_observed_at":"2026-08-06T22:35:45.002533Z","submitted_at":"2025-06-26T01:33:14Z","title":"SPA: Towards More Stealth and Persistent Backdoor Attacks in Federated Learning","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-06T22:43:43.598918Z"},"links":{"citing_paper":"/paper/2506.20931"},"observation_digest":"sha256:2adb176f842768fd67ae1f13e21c88aab63a3432124689dcedc16b1e130ac203","observation_id":"8c2e529a-ac2b-40a7-a583-9152c52af2cc","resolution":{"observed_at":"2026-08-06T22:43:44.199736Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:43:44.180766Z","title":"FLAME: taming backdoors in fed- erated learning,","venue":null,"work_id":"d5c09c51-bfd3-451f-bdba-994e45a01343","year":2022},"citing_paper":{"arxiv_id":"2506.20931","last_updated":"2025-06-26T01:33:14Z","snapshot_observed_at":"2026-08-06T22:35:45.002533Z","submitted_at":"2025-06-26T01:33:14Z","title":"SPA: Towards More Stealth and Persistent Backdoor Attacks in Federated Learning","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-06T22:43:43.603445Z"},"links":{"citing_paper":"/paper/2506.20931"},"observation_digest":"sha256:37e0e814e024cff833373688135082b254bc15ccc179fedb58e3fe996c1b1c79","observation_id":"3caa85f8-ada4-4637-b0b8-a17ed86b252a","resolution":{"observed_at":"2026-08-06T22:43:44.185295Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:43:44.167294Z","title":"Supervised contrastive learning,","venue":null,"work_id":"e2e98189-b267-48b0-84ba-4f38a707d8b0","year":2020},"citing_paper":{"arxiv_id":"2506.20931","last_updated":"2025-06-26T01:33:14Z","snapshot_observed_at":"2026-08-06T22:35:45.002533Z","submitted_at":"2025-06-26T01:33:14Z","title":"SPA: Towards More Stealth and Persistent Backdoor Attacks in Federated Learning","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-06T22:43:43.607800Z"},"links":{"citing_paper":"/paper/2506.20931"},"observation_digest":"sha256:a28eb868f88c0d6d96f47c9007b714f7349e1bfa87429c98c58175403102e2ea","observation_id":"d556a582-84e4-462a-bc8c-b40383ec78be","resolution":{"observed_at":"2026-08-06T22:43:44.171734Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:43:44.153858Z","title":"BadNets: Evaluating Backdooring Attacks on Deep Neural Net- works,","venue":null,"work_id":"b63cf376-3d1a-489e-9091-a7ff79771730","year":2019},"citing_paper":{"arxiv_id":"2506.20931","last_updated":"2025-06-26T01:33:14Z","snapshot_observed_at":"2026-08-06T22:35:45.002533Z","submitted_at":"2025-06-26T01:33:14Z","title":"SPA: Towards More Stealth and Persistent Backdoor Attacks in Federated Learning","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-06T22:43:43.611849Z"},"links":{"citing_paper":"/paper/2506.20931"},"observation_digest":"sha256:92b3c5e46406b636aa73ee634987cf3d91724af27aaf732e111062499f5e544f","observation_id":"639dc58b-439e-437b-8b39-0fc1f331d285","resolution":{"observed_at":"2026-08-06T22:43:44.158301Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1712.05526","last_updated":"2017-12-15T04:26:26Z","snapshot_observed_at":"2026-07-06T06:14:30.795326Z","submitted_at":"2017-12-15T04:26:26Z","title":"Targeted Backdoor Attacks on Deep Learning Systems Using Data Poisoning","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1712.05526","snapshot_observed_at":"2026-08-06T22:43:43.616491Z","title":"Targeted backdoor attacks on deep learning systems using data poisoning,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2506.20931","last_updated":"2025-06-26T01:33:14Z","snapshot_observed_at":"2026-08-06T22:35:45.002533Z","submitted_at":"2025-06-26T01:33:14Z","title":"SPA: Towards More Stealth and Persistent Backdoor Attacks in Federated Learning","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-06T22:43:43.616491Z"},"links":{"cited_paper":"/paper/1712.05526","citing_paper":"/paper/2506.20931"},"observation_digest":"sha256:cfbb40ae08b4b0cb65c528964f728b7a71204063a70e60acf9afaac492dc057a","observation_id":"40fe1464-7a88-4fa0-8e1b-bb54425441d1","resolution":{"observed_at":"2026-08-06T22:43:43.616491Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:43:44.138627Z","title":"Attack of the tails: Yes, you really can backdoor federated learning,","venue":null,"work_id":"a2edfd4a-f3ae-4ca8-aed7-fe218f3239a2","year":2020},"citing_paper":{"arxiv_id":"2506.20931","last_updated":"2025-06-26T01:33:14Z","snapshot_observed_at":"2026-08-06T22:35:45.002533Z","submitted_at":"2025-06-26T01:33:14Z","title":"SPA: Towards More Stealth and Persistent Backdoor Attacks in Federated Learning","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-06T22:43:43.621346Z"},"links":{"citing_paper":"/paper/2506.20931"},"observation_digest":"sha256:5f287b9f2fbf46555f60b830a42f799ba8baabdef87f4b05f59f373a202776a3","observation_id":"7d0c82a5-165b-48dc-975b-25421912ba56","resolution":{"observed_at":"2026-08-06T22:43:44.143710Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:43:44.123294Z","title":"DBA: dis- tributed backdoor attacks against federated learning,","venue":null,"work_id":"42240edd-d7d1-473b-b7e0-38b3d4f5f252","year":2020},"citing_paper":{"arxiv_id":"2506.20931","last_updated":"2025-06-26T01:33:14Z","snapshot_observed_at":"2026-08-06T22:35:45.002533Z","submitted_at":"2025-06-26T01:33:14Z","title":"SPA: Towards More Stealth and Persistent Backdoor Attacks in Federated Learning","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-06T22:43:43.625488Z"},"links":{"citing_paper":"/paper/2506.20931"},"observation_digest":"sha256:bb362be7bc233bbcd0d5985d72f1c713ab3585de0d532b2ef6fbd21e7b388dc7","observation_id":"6e5a17cd-4d39-4f8f-9d42-75c35a799f7d","resolution":{"observed_at":"2026-08-06T22:43:44.128570Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:43:44.108222Z","title":"Towards practical backdoor attacks on federated learning systems,","venue":null,"work_id":"0f5e1ec4-ba52-4c77-b32b-8294a68edec1","year":2024},"citing_paper":{"arxiv_id":"2506.20931","last_updated":"2025-06-26T01:33:14Z","snapshot_observed_at":"2026-08-06T22:35:45.002533Z","submitted_at":"2025-06-26T01:33:14Z","title":"SPA: Towards More Stealth and Persistent Backdoor Attacks in Federated Learning","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-06T22:43:43.629872Z"},"links":{"citing_paper":"/paper/2506.20931"},"observation_digest":"sha256:a865b47c2ac640aae4af529a76498b972a10c8ee8e2174fcb4bfb830369bb65e","observation_id":"4c657106-1476-4b2e-8967-1271692b0be8","resolution":{"observed_at":"2026-08-06T22:43:44.113721Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:43:44.093296Z","title":"On the vulnerability of backdoor defenses for federated learning,","venue":null,"work_id":"07cf282a-7e41-4b6c-a9e2-3863d451ad14","year":2023},"citing_paper":{"arxiv_id":"2506.20931","last_updated":"2025-06-26T01:33:14Z","snapshot_observed_at":"2026-08-06T22:35:45.002533Z","submitted_at":"2025-06-26T01:33:14Z","title":"SPA: Towards More Stealth and Persistent Backdoor Attacks in Federated Learning","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-06T22:43:43.634681Z"},"links":{"citing_paper":"/paper/2506.20931"},"observation_digest":"sha256:7c84c04e94674bf2a08e7bc230a725a9ed807862cf7930628aa1bae89fe02e96","observation_id":"f8a82972-3429-4bea-8f5e-e981671dd003","resolution":{"observed_at":"2026-08-06T22:43:44.097883Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:43:44.078285Z","title":"3dfed: Adaptive and extensible framework for covert backdoor attack in federated learning,","venue":null,"work_id":"320b814e-2d10-4cdb-bdde-cb586a2bd6a1","year":2023},"citing_paper":{"arxiv_id":"2506.20931","last_updated":"2025-06-26T01:33:14Z","snapshot_observed_at":"2026-08-06T22:35:45.002533Z","submitted_at":"2025-06-26T01:33:14Z","title":"SPA: Towards More Stealth and Persistent Backdoor Attacks in Federated Learning","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-06T22:43:43.638776Z"},"links":{"citing_paper":"/paper/2506.20931"},"observation_digest":"sha256:6cf245eea26a40b8203550d3e5f151ae5f7e1ae53a8fd9e7a8f291d7f47cc470","observation_id":"37806b4e-7328-4b3c-87ce-fd1a448b69ae","resolution":{"observed_at":"2026-08-06T22:43:44.083304Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:43:44.063442Z","title":"Poisoning with cerberus: Stealthy and colluded backdoor attack against federated learning,","venue":null,"work_id":"5f37f5b8-1618-44f8-b34b-ebd2d3abc798","year":2023},"citing_paper":{"arxiv_id":"2506.20931","last_updated":"2025-06-26T01:33:14Z","snapshot_observed_at":"2026-08-06T22:35:45.002533Z","submitted_at":"2025-06-26T01:33:14Z","title":"SPA: Towards More Stealth and Persistent Backdoor Attacks in Federated Learning","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-06T22:43:43.643133Z"},"links":{"citing_paper":"/paper/2506.20931"},"observation_digest":"sha256:9c6134c064977ce6c6848ff337a2563265b7cd241c434ae4d0bfe76c35828132","observation_id":"70233877-1bcf-4071-813c-d47b8d8a98ec","resolution":{"observed_at":"2026-08-06T22:43:44.068741Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:43:44.049124Z","title":"Machine learning with adversaries: Byzan- tine tolerant gradient descent,","venue":null,"work_id":"47c05d08-7801-4a89-b71d-b7408156c646","year":2017},"citing_paper":{"arxiv_id":"2506.20931","last_updated":"2025-06-26T01:33:14Z","snapshot_observed_at":"2026-08-06T22:35:45.002533Z","submitted_at":"2025-06-26T01:33:14Z","title":"SPA: Towards More Stealth and Persistent Backdoor Attacks in Federated Learning","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-06T22:43:43.647575Z"},"links":{"citing_paper":"/paper/2506.20931"},"observation_digest":"sha256:8203c3fe846f3889e2f0c10624ca42afa7a6adc2db641174edb7104223cc2363","observation_id":"3e5d7881-7ab5-4f29-b8aa-b51e38da8774","resolution":{"observed_at":"2026-08-06T22:43:44.054029Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:43:44.034599Z","title":"The limitations of federated learning in sybil settings,","venue":null,"work_id":"b9a8c584-2057-48b7-99c7-b10662db9d96","year":2020},"citing_paper":{"arxiv_id":"2506.20931","last_updated":"2025-06-26T01:33:14Z","snapshot_observed_at":"2026-08-06T22:35:45.002533Z","submitted_at":"2025-06-26T01:33:14Z","title":"SPA: Towards More Stealth and Persistent Backdoor Attacks in Federated Learning","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-06T22:43:43.652215Z"},"links":{"citing_paper":"/paper/2506.20931"},"observation_digest":"sha256:b998dab8f3528969653457fd4190521594bfb96f4f4bbbf09b71336985635b54","observation_id":"1a1a28fb-885b-47e1-9dee-83ef17864e1e","resolution":{"observed_at":"2026-08-06T22:43:44.038903Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2201.03772","last_updated":"2022-01-11T04:19:20Z","snapshot_observed_at":"2026-08-07T14:54:29.985533Z","submitted_at":"2022-01-11T04:19:20Z","title":"RFLBAT: A Robust Federated Learning Algorithm against Backdoor Attack","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2201.03772","snapshot_observed_at":"2026-08-06T22:43:43.656832Z","title":"RFLBAT: A robust federated learning algorithm against backdoor attack,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2506.20931","last_updated":"2025-06-26T01:33:14Z","snapshot_observed_at":"2026-08-06T22:35:45.002533Z","submitted_at":"2025-06-26T01:33:14Z","title":"SPA: Towards More Stealth and Persistent Backdoor Attacks in Federated Learning","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-06T22:43:43.656832Z"},"links":{"cited_paper":"/paper/2201.03772","citing_paper":"/paper/2506.20931"},"observation_digest":"sha256:7da08f396c083fed1c42906775bf1c99d9c7279eee746f8b01dfd7391f81b93a","observation_id":"b858e26c-252f-4ea1-b813-0b5b144af66f","resolution":{"observed_at":"2026-08-06T22:43:43.656832Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:43:44.020046Z","title":"Deepsight: Mitigating backdoor attacks in federated learning through deep model inspection,","venue":null,"work_id":"867b2dc0-d04e-46f1-97ef-64c3de49b7ba","year":2022},"citing_paper":{"arxiv_id":"2506.20931","last_updated":"2025-06-26T01:33:14Z","snapshot_observed_at":"2026-08-06T22:35:45.002533Z","submitted_at":"2025-06-26T01:33:14Z","title":"SPA: Towards More Stealth and Persistent Backdoor Attacks in Federated Learning","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-06T22:43:43.661709Z"},"links":{"citing_paper":"/paper/2506.20931"},"observation_digest":"sha256:f1cbaaf3b51945ccdedb124d06475acc68ad0b9a3adc1536e1fa63e07fa51bd0","observation_id":"20405fc4-4e56-43a5-9a2e-90e27e7732e6","resolution":{"observed_at":"2026-08-06T22:43:44.025315Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:43:44.005805Z","title":"BackdoorIndicator: Leveraging OOD data for proactive backdoor detection in feder- ated learning,","venue":null,"work_id":"05265bb4-29d6-40ec-b006-6f4cd56fcd88","year":2024},"citing_paper":{"arxiv_id":"2506.20931","last_updated":"2025-06-26T01:33:14Z","snapshot_observed_at":"2026-08-06T22:35:45.002533Z","submitted_at":"2025-06-26T01:33:14Z","title":"SPA: Towards More Stealth and Persistent Backdoor Attacks in Federated Learning","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-06T22:43:43.666067Z"},"links":{"citing_paper":"/paper/2506.20931"},"observation_digest":"sha256:7dca27eb0768ee5325d4407b4c815f122ddf8613050205d97889b68f4c3b3ccf","observation_id":"14637986-4b90-42f1-b3dd-4d975f188003","resolution":{"observed_at":"2026-08-06T22:43:44.010042Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:43:43.991618Z","title":"Crfl: Cer- tifiably robust federated learning against backdoor at- tacks,","venue":null,"work_id":"e326340c-75a0-4371-8217-26efad525a9f","year":2021},"citing_paper":{"arxiv_id":"2506.20931","last_updated":"2025-06-26T01:33:14Z","snapshot_observed_at":"2026-08-06T22:35:45.002533Z","submitted_at":"2025-06-26T01:33:14Z","title":"SPA: Towards More Stealth and Persistent Backdoor Attacks in Federated Learning","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-06T22:43:43.670079Z"},"links":{"citing_paper":"/paper/2506.20931"},"observation_digest":"sha256:952981ea432f06f7c0f3d9565c5654276d5875e496a2ddd2614eaac2c90ba872","observation_id":"cb773991-8b2a-49ae-91ef-68d73722f5cc","resolution":{"observed_at":"2026-08-06T22:43:43.996066Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:43:43.976863Z","title":"De- fending against backdoors in federated learning with robust learning rate,","venue":null,"work_id":"bf3a4daf-e504-4e4c-9b5d-264c8bf7d57e","year":2021},"citing_paper":{"arxiv_id":"2506.20931","last_updated":"2025-06-26T01:33:14Z","snapshot_observed_at":"2026-08-06T22:35:45.002533Z","submitted_at":"2025-06-26T01:33:14Z","title":"SPA: Towards More Stealth and Persistent Backdoor Attacks in Federated Learning","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-06T22:43:43.674112Z"},"links":{"citing_paper":"/paper/2506.20931"},"observation_digest":"sha256:b7df8b5568bc18a404fee5e8c80a729371a5368cf6d58f39afecec21198dd9d0","observation_id":"64c53a97-c4fe-495e-99c0-c903892ca368","resolution":{"observed_at":"2026-08-06T22:43:43.981476Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:43:43.962941Z","title":"Attack of the tails: Yes, you really can backdoor federated learning,","venue":null,"work_id":"25d936e0-96bb-4f72-8e77-5b3bf6b35b30","year":2020},"citing_paper":{"arxiv_id":"2506.20931","last_updated":"2025-06-26T01:33:14Z","snapshot_observed_at":"2026-08-06T22:35:45.002533Z","submitted_at":"2025-06-26T01:33:14Z","title":"SPA: Towards More Stealth and Persistent Backdoor Attacks in Federated Learning","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-06T22:43:43.678874Z"},"links":{"citing_paper":"/paper/2506.20931"},"observation_digest":"sha256:a055ef2097e5ea240f38e7511ab9bee51735d27d7c2332bc5ec3e71de9340546","observation_id":"42e81e84-9b34-4245-a61d-35e45abe3a55","resolution":{"observed_at":"2026-08-06T22:43:43.967396Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:43:43.946070Z","title":"DRUPE: Distribution Preserving Backdoor Attack in Self-supervised Learning,","venue":null,"work_id":"a5cb7d3d-f534-4635-9820-f366154a134e","year":2023},"citing_paper":{"arxiv_id":"2506.20931","last_updated":"2025-06-26T01:33:14Z","snapshot_observed_at":"2026-08-06T22:35:45.002533Z","submitted_at":"2025-06-26T01:33:14Z","title":"SPA: Towards More Stealth and Persistent Backdoor Attacks in Federated Learning","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-06T22:43:43.683819Z"},"links":{"citing_paper":"/paper/2506.20931"},"observation_digest":"sha256:69b812c90aa50613bb69dd4c39baa93691cccd9474a44c870d6a32ab92b9c4e0","observation_id":"81e73f1a-a210-4507-bb55-9cd2bad37628","resolution":{"observed_at":"2026-08-06T22:43:43.952143Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:43:43.929787Z","title":"Backdoor attack with imperceptible input and latent modification,","venue":null,"work_id":"895280f4-0b6e-4da8-b0c1-3088b09e510a","year":2021},"citing_paper":{"arxiv_id":"2506.20931","last_updated":"2025-06-26T01:33:14Z","snapshot_observed_at":"2026-08-06T22:35:45.002533Z","submitted_at":"2025-06-26T01:33:14Z","title":"SPA: Towards More Stealth and Persistent Backdoor Attacks in Federated Learning","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-06T22:43:43.688245Z"},"links":{"citing_paper":"/paper/2506.20931"},"observation_digest":"sha256:31da66353cf8124758922969c8c09778b727b50d97e4a310bdb5317ee73a42bf","observation_id":"4008b8c0-69b2-4f79-8465-3f1706b06f21","resolution":{"observed_at":"2026-08-06T22:43:43.934617Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:43:43.915617Z","title":"Learning multiple layers of features from tiny images","venue":null,"work_id":"389a46ff-1eb1-4d64-8d54-4bcd7244da5a","year":2009},"citing_paper":{"arxiv_id":"2506.20931","last_updated":"2025-06-26T01:33:14Z","snapshot_observed_at":"2026-08-06T22:35:45.002533Z","submitted_at":"2025-06-26T01:33:14Z","title":"SPA: Towards More Stealth and Persistent Backdoor Attacks in Federated Learning","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-06T22:43:43.693011Z"},"links":{"citing_paper":"/paper/2506.20931"},"observation_digest":"sha256:8612d0ef349c261532eea8ca5d49639cda9066ed4ebedd47afbeda2a81a3084a","observation_id":"0a9f25bc-5376-42a3-a76a-6735c9848539","resolution":{"observed_at":"2026-08-06T22:43:43.920161Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:43:43.900217Z","title":"Detection of traffic signs in real-world images: The german traffic sign detection benchmark,","venue":null,"work_id":"a629093f-d216-4ed3-bd9c-75c3ebd27040","year":2013},"citing_paper":{"arxiv_id":"2506.20931","last_updated":"2025-06-26T01:33:14Z","snapshot_observed_at":"2026-08-06T22:35:45.002533Z","submitted_at":"2025-06-26T01:33:14Z","title":"SPA: Towards More Stealth and Persistent Backdoor Attacks in Federated Learning","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-06T22:43:43.697267Z"},"links":{"citing_paper":"/paper/2506.20931"},"observation_digest":"sha256:1b58d00c02e68c0ebb375fc9279523dd1339d7ce47e939b2395d7363fb361475","observation_id":"ef810302-1612-4a00-85ff-720ce437726b","resolution":{"observed_at":"2026-08-06T22:43:43.905164Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:43:43.885683Z","title":"Deep residual learning for image recognition,","venue":null,"work_id":"ccb267bf-7202-4b7e-855b-d1371426487c","year":2016},"citing_paper":{"arxiv_id":"2506.20931","last_updated":"2025-06-26T01:33:14Z","snapshot_observed_at":"2026-08-06T22:35:45.002533Z","submitted_at":"2025-06-26T01:33:14Z","title":"SPA: Towards More Stealth and Persistent Backdoor Attacks in Federated Learning","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-06T22:43:43.701443Z"},"links":{"citing_paper":"/paper/2506.20931"},"observation_digest":"sha256:1ea026ff43d56c1f645f8efa9ce087c1fa002669f652f7f4dc2c3dbd438d18da","observation_id":"2b876747-47ce-4fb0-89f9-3d966f43daba","resolution":{"observed_at":"2026-08-06T22:43:43.890380Z","resolver_source":"raw_fallback","status":"malformed_identifier"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:43:43.872262Z","title":"Very deep convolu- tional networks for large-scale image recognition,","venue":null,"work_id":"9c1ff782-2f1a-4354-af68-9159893a7320","year":2015},"citing_paper":{"arxiv_id":"2506.20931","last_updated":"2025-06-26T01:33:14Z","snapshot_observed_at":"2026-08-06T22:35:45.002533Z","submitted_at":"2025-06-26T01:33:14Z","title":"SPA: Towards More Stealth and Persistent Backdoor Attacks in Federated Learning","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-06T22:43:43.705912Z"},"links":{"citing_paper":"/paper/2506.20931"},"observation_digest":"sha256:72305a9ae8034639b35259631ceec4588858807ab7c27e1d5401fa55007ca17d","observation_id":"76d214b7-c45e-49ac-9474-dca2959f5233","resolution":{"observed_at":"2026-08-06T22:43:43.876637Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:43:43.710396Z","title":"Mobilenetv2: Inverted residuals and linear bottlenecks,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2506.20931","last_updated":"2025-06-26T01:33:14Z","snapshot_observed_at":"2026-08-06T22:35:45.002533Z","submitted_at":"2025-06-26T01:33:14Z","title":"SPA: Towards More Stealth and Persistent Backdoor Attacks in Federated Learning","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-06T22:43:43.710396Z"},"links":{"citing_paper":"/paper/2506.20931"},"observation_digest":"sha256:b77fd95ee18934f28d68ba51561fedbb00239c1b847ad9b3d6e5b8bf049329fe","observation_id":"c00b4ad7-0f1f-4a1d-8505-396be2c260c1","resolution":{"observed_at":"2026-08-06T22:43:43.710396Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:43:43.848343Z","title":"Data-free knowledge distillation for heterogeneous federated learning,","venue":null,"work_id":"bf320756-45eb-4098-86b7-f65bab655ffd","year":2021},"citing_paper":{"arxiv_id":"2506.20931","last_updated":"2025-06-26T01:33:14Z","snapshot_observed_at":"2026-08-06T22:35:45.002533Z","submitted_at":"2025-06-26T01:33:14Z","title":"SPA: Towards More Stealth and Persistent Backdoor Attacks in Federated Learning","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-06T22:43:43.714640Z"},"links":{"citing_paper":"/paper/2506.20931"},"observation_digest":"sha256:e6a2a18c118f158d4ab9b2635dcf912d62fb0632dd739de5890141c062d6c8a6","observation_id":"5aecd4d0-b021-4efb-9f13-aa69a51064a7","resolution":{"observed_at":"2026-08-06T22:43:43.853035Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:43:43.834238Z","title":"BadCleaner: Defending Backdoor Attacks in Federated Learning via Attention-Based Multi-Teacher Distillation,","venue":null,"work_id":"653d58be-313e-4a55-95c6-375a946eea1b","year":2024},"citing_paper":{"arxiv_id":"2506.20931","last_updated":"2025-06-26T01:33:14Z","snapshot_observed_at":"2026-08-06T22:35:45.002533Z","submitted_at":"2025-06-26T01:33:14Z","title":"SPA: Towards More Stealth and Persistent Backdoor Attacks in Federated Learning","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-06T22:43:43.718958Z"},"links":{"citing_paper":"/paper/2506.20931"},"observation_digest":"sha256:ea318b1dcb304806e74aa875ca1291608844911cbe8434960d9553a099b0fea7","observation_id":"4282127d-80d6-4c0f-9b71-4bdab57d40d9","resolution":{"observed_at":"2026-08-06T22:43:43.838706Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:43:43.816973Z","title":"FLPurifier: Backdoor Defense in Fed- erated Learning via Decoupled Contrastive Training,","venue":null,"work_id":"ddb9d88f-8827-4952-8a4e-0709040c932e","year":2024},"citing_paper":{"arxiv_id":"2506.20931","last_updated":"2025-06-26T01:33:14Z","snapshot_observed_at":"2026-08-06T22:35:45.002533Z","submitted_at":"2025-06-26T01:33:14Z","title":"SPA: Towards More Stealth and Persistent Backdoor Attacks in Federated Learning","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-06T22:43:43.723239Z"},"links":{"citing_paper":"/paper/2506.20931"},"observation_digest":"sha256:1bb950f1a9434bc6500d9833520c0f03a3a24a481dd65f704ea3a185ec07d529","observation_id":"baf6ef8a-0985-416a-a2a7-88c8382e1bd5","resolution":{"observed_at":"2026-08-06T22:43:43.823950Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1909.06335","last_updated":"2019-09-13T17:26:20Z","snapshot_observed_at":"2026-08-02T11:40:53.964079Z","submitted_at":"2019-09-13T17:26:20Z","title":"Measuring the Effects of Non-Identical Data Distribution for Federated Visual Classification","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1909.06335","snapshot_observed_at":"2026-08-06T22:43:43.727822Z","title":"Measuring the effects of non-identical data distribution for federated visual classification,","venue":null,"work_id":null,"year":1909},"citing_paper":{"arxiv_id":"2506.20931","last_updated":"2025-06-26T01:33:14Z","snapshot_observed_at":"2026-08-06T22:35:45.002533Z","submitted_at":"2025-06-26T01:33:14Z","title":"SPA: Towards More Stealth and Persistent Backdoor Attacks in Federated Learning","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-06T22:43:43.727822Z"},"links":{"cited_paper":"/paper/1909.06335","citing_paper":"/paper/2506.20931"},"observation_digest":"sha256:a1ee706112a4934a6c2a6b5ad66edf32903d6b86d7a1bcbd18d3fb059da5b195","observation_id":"a19eebd9-374f-49d3-8492-5519238dfce5","resolution":{"observed_at":"2026-08-06T22:43:43.727822Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2506.20931","last_updated":"2025-06-26T01:33:14Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-06T22:35:45.002533Z","submitted_at":"2025-06-26T01:33:14Z","title":"SPA: Towards More Stealth and Persistent Backdoor Attacks in Federated Learning"},"reference_resolution":{"displayed":47,"state_counts":{"malformed_identifier":1,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":6,"verified_exact":0,"verified_fuzzy":40},"total_outbound_references":47},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"thesis":"As of 8 August 2026, this Paper Citation Record lists 47 of 47 outbound references and 0 inbound Pith citation observations for arXiv:2506.20931."}