{"as_of":"2026-08-15T09:33:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:82df7b4a5f953a237b2bbffc25d03be3f5f292a6c20889c10f65184323c3d432","coverage":[{"denominator":98,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":98,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-06T22:06:45.115088Z","state":"measured"},{"denominator":98,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":98,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-15T06:32:42.880941+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2506.22722/citation-record","integrity":"/paper/2506.22722/integrity","json":"/paper/2506.22722/citation-record.json","paper":"/paper/2506.22722"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:06:34.970623Z","title":"Adversarial ma- chine learning: A taxonomy and terminology of attacks and mitigations,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.22722","last_updated":"2025-06-28T02:06:23Z","snapshot_observed_at":"2026-08-13T20:37:50.771603Z","submitted_at":"2025-06-28T02:06:23Z","title":"Kill Two Birds with One Stone! Trajectory enabled Unified Online Detection of Adversarial Examples and Backdoor Attacks","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-06T22:06:34.970623Z"},"links":{"citing_paper":"/paper/2506.22722"},"observation_digest":"sha256:4d6b07a01b6ea885959e5e21656791800346d2ddf34b765768f2293e920de93d","observation_id":"994677a6-90b8-4a10-9489-2640ce5a52f6","resolution":{"observed_at":"2026-08-06T22:06:34.970623Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1412.6572","last_updated":"2015-03-20T20:19:16Z","snapshot_observed_at":"2026-08-12T17:13:46.394331Z","submitted_at":"2014-12-20T01:17:12Z","title":"Explaining and Harnessing Adversarial Examples","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1412.6572","snapshot_observed_at":"2026-08-06T22:06:35.033408Z","title":"Explaining and harnessing adversarial examples,","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2506.22722","last_updated":"2025-06-28T02:06:23Z","snapshot_observed_at":"2026-08-13T20:37:50.771603Z","submitted_at":"2025-06-28T02:06:23Z","title":"Kill Two Birds with One Stone! Trajectory enabled Unified Online Detection of Adversarial Examples and Backdoor Attacks","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-06T22:06:35.033408Z"},"links":{"cited_paper":"/paper/1412.6572","citing_paper":"/paper/2506.22722"},"observation_digest":"sha256:870d0e95248bdb2e4e7517d132ff7cd61fce6bbf1504c5286bf83385690d24f5","observation_id":"67d05776-344f-4fec-83f2-dbb7ea1f4843","resolution":{"observed_at":"2026-08-06T22:06:35.033408Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1708.06733","snapshot_observed_at":"2026-08-06T22:06:35.103748Z","title":"Badnets: Identifying vulnera- bilities in the machine learning model supply chain,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2506.22722","last_updated":"2025-06-28T02:06:23Z","snapshot_observed_at":"2026-08-13T20:37:50.771603Z","submitted_at":"2025-06-28T02:06:23Z","title":"Kill Two Birds with One Stone! Trajectory enabled Unified Online Detection of Adversarial Examples and Backdoor Attacks","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-06T22:06:35.103748Z"},"links":{"cited_paper":"/paper/1708.06733","citing_paper":"/paper/2506.22722"},"observation_digest":"sha256:90f6256f644fa07d84355bba15a9613bdfb78153c30abc90886200498d5b0f38","observation_id":"735194d4-bf30-42c1-b3e5-fa404631198c","resolution":{"observed_at":"2026-08-06T22:06:35.103748Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:06:35.251365Z","title":"Manipulating machine learning: Poisoning attacks and countermeasures for regression learning,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2506.22722","last_updated":"2025-06-28T02:06:23Z","snapshot_observed_at":"2026-08-13T20:37:50.771603Z","submitted_at":"2025-06-28T02:06:23Z","title":"Kill Two Birds with One Stone! Trajectory enabled Unified Online Detection of Adversarial Examples and Backdoor Attacks","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-06T22:06:35.251365Z"},"links":{"citing_paper":"/paper/2506.22722"},"observation_digest":"sha256:772dfa2af4d57aaf9332ac17d8257cdaa93224a2743aa4c09402c2db651d18f4","observation_id":"897d5889-43be-4e53-bc8c-0669d9a602a1","resolution":{"observed_at":"2026-08-06T22:06:35.251365Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:06:35.339760Z","title":"Adversarial machine learning- industry perspectives,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2506.22722","last_updated":"2025-06-28T02:06:23Z","snapshot_observed_at":"2026-08-13T20:37:50.771603Z","submitted_at":"2025-06-28T02:06:23Z","title":"Kill Two Birds with One Stone! Trajectory enabled Unified Online Detection of Adversarial Examples and Backdoor Attacks","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-06T22:06:35.339760Z"},"links":{"citing_paper":"/paper/2506.22722"},"observation_digest":"sha256:f6fc923549b35c19993f689f3c6dd4e9f7bfc758d6c80528369683c22cc43ee2","observation_id":"e917812d-b094-4c64-a204-32d938c63a4e","resolution":{"observed_at":"2026-08-06T22:06:35.339760Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:06:35.408108Z","title":"Nic: Detecting adversarial samples with neural network invariant checking,","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2506.22722","last_updated":"2025-06-28T02:06:23Z","snapshot_observed_at":"2026-08-13T20:37:50.771603Z","submitted_at":"2025-06-28T02:06:23Z","title":"Kill Two Birds with One Stone! Trajectory enabled Unified Online Detection of Adversarial Examples and Backdoor Attacks","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-06T22:06:35.408108Z"},"links":{"citing_paper":"/paper/2506.22722"},"observation_digest":"sha256:ca821d516337682ef20dd68e700a6ea66a46ad9cf5ebd9b6d343b253544cec4b","observation_id":"862c9270-22f7-4b84-8e30-405a87048637","resolution":{"observed_at":"2026-08-06T22:06:35.408108Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:06:35.498561Z","title":"What you see is not what the network infers: detecting adversarial examples based on semantic contradiction,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2506.22722","last_updated":"2025-06-28T02:06:23Z","snapshot_observed_at":"2026-08-13T20:37:50.771603Z","submitted_at":"2025-06-28T02:06:23Z","title":"Kill Two Birds with One Stone! Trajectory enabled Unified Online Detection of Adversarial Examples and Backdoor Attacks","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-06T22:06:35.498561Z"},"links":{"citing_paper":"/paper/2506.22722"},"observation_digest":"sha256:6c63b544522b76481eaf45b60cdd66025cdf2b531b8054ccd0da5c7f22025be2","observation_id":"2246124e-c9d7-426c-8b70-ede5b52143a9","resolution":{"observed_at":"2026-08-06T22:06:35.498561Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:06:35.596155Z","title":"STRIP: A defence against trojan attacks on deep neural networks,","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2506.22722","last_updated":"2025-06-28T02:06:23Z","snapshot_observed_at":"2026-08-13T20:37:50.771603Z","submitted_at":"2025-06-28T02:06:23Z","title":"Kill Two Birds with One Stone! Trajectory enabled Unified Online Detection of Adversarial Examples and Backdoor Attacks","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-06T22:06:35.596155Z"},"links":{"citing_paper":"/paper/2506.22722"},"observation_digest":"sha256:a3f238e8d950cbfb6bc71a38a05a882b04fcb1ce4f03390aa22d9b66d29bfd66","observation_id":"ad908d5e-51ad-480c-a675-fce979a9a25d","resolution":{"observed_at":"2026-08-06T22:06:35.596155Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:06:35.715252Z","title":"Robust backdoor detection for deep learning via topological evolution dynamics,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.22722","last_updated":"2025-06-28T02:06:23Z","snapshot_observed_at":"2026-08-13T20:37:50.771603Z","submitted_at":"2025-06-28T02:06:23Z","title":"Kill Two Birds with One Stone! Trajectory enabled Unified Online Detection of Adversarial Examples and Backdoor Attacks","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-06T22:06:35.715252Z"},"links":{"citing_paper":"/paper/2506.22722"},"observation_digest":"sha256:010d0206a1bc0918dd52be46005cd8ee79ed8b2288e85aca6bbdc5c6d163d4ec","observation_id":"a7945b7b-da6e-465e-8ca9-a00ab4b843f3","resolution":{"observed_at":"2026-08-06T22:06:35.715252Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.10717","last_updated":"2024-03-15T22:35:07Z","snapshot_observed_at":"2026-08-13T00:53:03.003590Z","submitted_at":"2024-03-15T22:35:07Z","title":"Backdoor Secrets Unveiled: Identifying Backdoor Data with Optimized Scaled Prediction Consistency","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.10717","snapshot_observed_at":"2026-08-06T22:06:35.815547Z","title":"Backdoor secrets unveiled: Identifying backdoor data with optimized scaled prediction consistency,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.22722","last_updated":"2025-06-28T02:06:23Z","snapshot_observed_at":"2026-08-13T20:37:50.771603Z","submitted_at":"2025-06-28T02:06:23Z","title":"Kill Two Birds with One Stone! Trajectory enabled Unified Online Detection of Adversarial Examples and Backdoor Attacks","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-06T22:06:35.815547Z"},"links":{"cited_paper":"/paper/2403.10717","citing_paper":"/paper/2506.22722"},"observation_digest":"sha256:ccc7d45f5dafb62f8204a1af8e6223be836a215ce763abb53073d0155e8e245f","observation_id":"0ccfff19-a1ee-4e51-9b8b-a5aefc7f503c","resolution":{"observed_at":"2026-08-06T22:06:35.815547Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:06:35.911182Z","title":"Dataset security for machine learn- ing: Data poisoning, backdoor attacks, and defenses,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2506.22722","last_updated":"2025-06-28T02:06:23Z","snapshot_observed_at":"2026-08-13T20:37:50.771603Z","submitted_at":"2025-06-28T02:06:23Z","title":"Kill Two Birds with One Stone! Trajectory enabled Unified Online Detection of Adversarial Examples and Backdoor Attacks","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-06T22:06:35.911182Z"},"links":{"citing_paper":"/paper/2506.22722"},"observation_digest":"sha256:1f4b013bcfc0111c121799d1df2c64e42ec5057d16caf8d1cee0e94b1e0861e3","observation_id":"d61489d4-31fe-40c7-8d46-40207536b706","resolution":{"observed_at":"2026-08-06T22:06:35.911182Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:06:36.007597Z","title":"Adversarial neuron pruning purifies backdoored deep models,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2506.22722","last_updated":"2025-06-28T02:06:23Z","snapshot_observed_at":"2026-08-13T20:37:50.771603Z","submitted_at":"2025-06-28T02:06:23Z","title":"Kill Two Birds with One Stone! Trajectory enabled Unified Online Detection of Adversarial Examples and Backdoor Attacks","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-06T22:06:36.007597Z"},"links":{"citing_paper":"/paper/2506.22722"},"observation_digest":"sha256:ff3270e2956ee173b37aa7fb60fb0fdc6b607705471f28c020cabbc44267e20f","observation_id":"77f81fcc-0a0f-4d0e-ac6e-cf8f3f1a64b7","resolution":{"observed_at":"2026-08-06T22:06:36.007597Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:06:36.136988Z","title":"Gotta catch’em all: Using honeypots to catch adversarial attacks on neural networks,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2506.22722","last_updated":"2025-06-28T02:06:23Z","snapshot_observed_at":"2026-08-13T20:37:50.771603Z","submitted_at":"2025-06-28T02:06:23Z","title":"Kill Two Birds with One Stone! Trajectory enabled Unified Online Detection of Adversarial Examples and Backdoor Attacks","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-06T22:06:36.136988Z"},"links":{"citing_paper":"/paper/2506.22722"},"observation_digest":"sha256:144afd235e447b2871f621199346356ec53e0bde44ca61d3838414d78ad9f555","observation_id":"66b29368-302f-4b88-b679-a18ddd39fdbc","resolution":{"observed_at":"2026-08-06T22:06:36.136988Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:06:36.239275Z","title":"AI-guardian: Defeating adversarial attacks using backdoors,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.22722","last_updated":"2025-06-28T02:06:23Z","snapshot_observed_at":"2026-08-13T20:37:50.771603Z","submitted_at":"2025-06-28T02:06:23Z","title":"Kill Two Birds with One Stone! Trajectory enabled Unified Online Detection of Adversarial Examples and Backdoor Attacks","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-06T22:06:36.239275Z"},"links":{"citing_paper":"/paper/2506.22722"},"observation_digest":"sha256:fd4cc0cea2cadfee0633f8ac3ef119fa7c55b93b9b552f45fc542f62f5b03f6f","observation_id":"041f9311-082f-4183-8bfb-d6ba4563dcc2","resolution":{"observed_at":"2026-08-06T22:06:36.239275Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:06:36.352471Z","title":"Towards unified robustness against both backdoor and adversarial attacks,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.22722","last_updated":"2025-06-28T02:06:23Z","snapshot_observed_at":"2026-08-13T20:37:50.771603Z","submitted_at":"2025-06-28T02:06:23Z","title":"Kill Two Birds with One Stone! Trajectory enabled Unified Online Detection of Adversarial Examples and Backdoor Attacks","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-06T22:06:36.352471Z"},"links":{"citing_paper":"/paper/2506.22722"},"observation_digest":"sha256:4f7f1e4055aae1717d191226495d66fbe66eb4da6c30ad38e5619e1e765d7d61","observation_id":"4e8326cd-7405-46a6-ab96-626495c139d8","resolution":{"observed_at":"2026-08-06T22:06:36.352471Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:06:36.448354Z","title":"A tale of evil twins: Adversarial inputs versus poisoned models,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2506.22722","last_updated":"2025-06-28T02:06:23Z","snapshot_observed_at":"2026-08-13T20:37:50.771603Z","submitted_at":"2025-06-28T02:06:23Z","title":"Kill Two Birds with One Stone! Trajectory enabled Unified Online Detection of Adversarial Examples and Backdoor Attacks","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-06T22:06:36.448354Z"},"links":{"citing_paper":"/paper/2506.22722"},"observation_digest":"sha256:dd88cc69c7baafce4282852d0028266309ea09c127ca714129949a3be3ecdcf1","observation_id":"6a617a05-0c56-4fc0-af51-95610828f3dd","resolution":{"observed_at":"2026-08-06T22:06:36.448354Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:06:36.551907Z","title":"On model outsourcing adaptive attacks to deep learning backdoor defenses,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.22722","last_updated":"2025-06-28T02:06:23Z","snapshot_observed_at":"2026-08-13T20:37:50.771603Z","submitted_at":"2025-06-28T02:06:23Z","title":"Kill Two Birds with One Stone! Trajectory enabled Unified Online Detection of Adversarial Examples and Backdoor Attacks","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-06T22:06:36.551907Z"},"links":{"citing_paper":"/paper/2506.22722"},"observation_digest":"sha256:ad075863c477625b4e17c0f29a7619c2f925c99cbd885b640f8d3a5d54d846de","observation_id":"ea844b33-0604-4dbc-9e64-b8ae056034ea","resolution":{"observed_at":"2026-08-06T22:06:36.551907Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2106.15023","last_updated":"2021-06-28T23:19:02Z","snapshot_observed_at":"2026-08-13T18:55:20.370263Z","submitted_at":"2021-06-28T23:19:02Z","title":"Evading Adversarial Example Detection Defenses with Orthogonal Projected Gradient Descent","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2106.15023","snapshot_observed_at":"2026-08-06T22:06:36.655535Z","title":"Evad- ing adversarial example detection defenses with orthogonal projected gradient descent,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2506.22722","last_updated":"2025-06-28T02:06:23Z","snapshot_observed_at":"2026-08-13T20:37:50.771603Z","submitted_at":"2025-06-28T02:06:23Z","title":"Kill Two Birds with One Stone! Trajectory enabled Unified Online Detection of Adversarial Examples and Backdoor Attacks","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-06T22:06:36.655535Z"},"links":{"cited_paper":"/paper/2106.15023","citing_paper":"/paper/2506.22722"},"observation_digest":"sha256:81a352b8b752c1cbffaf73ed521d4602e9726bebb52776c4219813f629687cdb","observation_id":"b628b4b7-2f83-415f-83fa-cd1eab6f887d","resolution":{"observed_at":"2026-08-06T22:06:36.655535Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:06:36.779281Z","title":"Feature squeezing: Detecting adversarial examples in deep neural networks,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2506.22722","last_updated":"2025-06-28T02:06:23Z","snapshot_observed_at":"2026-08-13T20:37:50.771603Z","submitted_at":"2025-06-28T02:06:23Z","title":"Kill Two Birds with One Stone! Trajectory enabled Unified Online Detection of Adversarial Examples and Backdoor Attacks","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-06T22:06:36.779281Z"},"links":{"citing_paper":"/paper/2506.22722"},"observation_digest":"sha256:b25da3a01e1c28cae60e7916b26f8a7fa1741b95dccae7156dbfff3516f38be8","observation_id":"fb0b05b4-f02d-4a2d-a557-3bd17993f800","resolution":{"observed_at":"2026-08-06T22:06:36.779281Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:06:36.879296Z","title":"Addition: Detecting adversarial examples with image-dependent noise reduction,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.22722","last_updated":"2025-06-28T02:06:23Z","snapshot_observed_at":"2026-08-13T20:37:50.771603Z","submitted_at":"2025-06-28T02:06:23Z","title":"Kill Two Birds with One Stone! Trajectory enabled Unified Online Detection of Adversarial Examples and Backdoor Attacks","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-06T22:06:36.879296Z"},"links":{"citing_paper":"/paper/2506.22722"},"observation_digest":"sha256:246b8f945a7dd094cc7c5a27effc9d8f775db75d731b621edc469ccb4f893dfe","observation_id":"ca72b6f2-ec52-4abf-8333-67ad96fcfd6c","resolution":{"observed_at":"2026-08-06T22:06:36.879296Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:06:37.002202Z","title":"DISCO: Adversarial defense with local implicit functions,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2506.22722","last_updated":"2025-06-28T02:06:23Z","snapshot_observed_at":"2026-08-13T20:37:50.771603Z","submitted_at":"2025-06-28T02:06:23Z","title":"Kill Two Birds with One Stone! Trajectory enabled Unified Online Detection of Adversarial Examples and Backdoor Attacks","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-06T22:06:37.002202Z"},"links":{"citing_paper":"/paper/2506.22722"},"observation_digest":"sha256:955620deeb7cf54c020bf2cfbfbdb84f4bc769257e9e1df136b2a47b72e78453","observation_id":"9d008270-e2dd-42d1-9275-efbd035fb198","resolution":{"observed_at":"2026-08-06T22:06:37.002202Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:06:37.050955Z","title":"{PatchCleanser}: Certifiably robust defense against adversarial patches for any image classifier,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2506.22722","last_updated":"2025-06-28T02:06:23Z","snapshot_observed_at":"2026-08-13T20:37:50.771603Z","submitted_at":"2025-06-28T02:06:23Z","title":"Kill Two Birds with One Stone! Trajectory enabled Unified Online Detection of Adversarial Examples and Backdoor Attacks","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-06T22:06:37.050955Z"},"links":{"citing_paper":"/paper/2506.22722"},"observation_digest":"sha256:1f2cac21b623d36545e05f6ccb3a3216e27309087909ccfdb86b687a104f4965","observation_id":"e8b34622-4ecf-4c23-8f5f-14943208d75c","resolution":{"observed_at":"2026-08-06T22:06:37.050955Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:06:55.818484Z","title":"SentiNet: Detecting localized universal attacks against deep learning systems,","venue":null,"work_id":"70730b0c-0c33-4ed5-9578-ea721cbcca9d","year":2020},"citing_paper":{"arxiv_id":"2506.22722","last_updated":"2025-06-28T02:06:23Z","snapshot_observed_at":"2026-08-13T20:37:50.771603Z","submitted_at":"2025-06-28T02:06:23Z","title":"Kill Two Birds with One Stone! Trajectory enabled Unified Online Detection of Adversarial Examples and Backdoor Attacks","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-06T22:06:37.110575Z"},"links":{"citing_paper":"/paper/2506.22722"},"observation_digest":"sha256:d23afc84000c60c469aa8870d203a135e8df97a10ca27b8eb0793406257b4f20","observation_id":"fb7c1717-7549-4276-a339-f59d9ca0d4dd","resolution":{"observed_at":"2026-08-06T22:06:55.896956Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:06:55.679299Z","title":"Scale-up: An efficient black-box input-level backdoor detection via analyzing scaled prediction consistency,","venue":null,"work_id":"c7c3972b-c25c-4a0c-87d4-d7e128692d23","year":2023},"citing_paper":{"arxiv_id":"2506.22722","last_updated":"2025-06-28T02:06:23Z","snapshot_observed_at":"2026-08-13T20:37:50.771603Z","submitted_at":"2025-06-28T02:06:23Z","title":"Kill Two Birds with One Stone! Trajectory enabled Unified Online Detection of Adversarial Examples and Backdoor Attacks","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-06T22:06:37.196385Z"},"links":{"citing_paper":"/paper/2506.22722"},"observation_digest":"sha256:912d8d37416315fb7079ee2ba15a5e2c350172d3f9aaa5f21652b4a9074b6013","observation_id":"4bee3169-8fc6-4f29-8bb8-bd76734f7375","resolution":{"observed_at":"2026-08-06T22:06:55.746885Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:06:55.526105Z","title":"Towards universal detection of adversarial examples via pseudorandom classifiers,","venue":null,"work_id":"d988aca9-6af4-48bd-b2a9-a87bab7db585","year":2023},"citing_paper":{"arxiv_id":"2506.22722","last_updated":"2025-06-28T02:06:23Z","snapshot_observed_at":"2026-08-13T20:37:50.771603Z","submitted_at":"2025-06-28T02:06:23Z","title":"Kill Two Birds with One Stone! Trajectory enabled Unified Online Detection of Adversarial Examples and Backdoor Attacks","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-06T22:06:37.266004Z"},"links":{"citing_paper":"/paper/2506.22722"},"observation_digest":"sha256:c6aa63d1ce46b29955816180289f149825b485bcdc643d7e278129af25012404","observation_id":"a5e20c8f-af08-4578-a960-8bc6019ae2ce","resolution":{"observed_at":"2026-08-06T22:06:55.610153Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:06:55.356170Z","title":"MM-BD: Post-training detection of backdoor attacks with arbitrary backdoor pattern types using a maximum margin statistic,","venue":null,"work_id":"572b6770-9737-4fca-9b97-b02974d74fd4","year":2024},"citing_paper":{"arxiv_id":"2506.22722","last_updated":"2025-06-28T02:06:23Z","snapshot_observed_at":"2026-08-13T20:37:50.771603Z","submitted_at":"2025-06-28T02:06:23Z","title":"Kill Two Birds with One Stone! Trajectory enabled Unified Online Detection of Adversarial Examples and Backdoor Attacks","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-06T22:06:37.332975Z"},"links":{"citing_paper":"/paper/2506.22722"},"observation_digest":"sha256:972b0300ba6e0c132c6eb23f291964bbf9b10e28520867184df0ee92df0417d1","observation_id":"f1897d3f-5da2-428c-8e32-4b419ad81598","resolution":{"observed_at":"2026-08-06T22:06:55.446270Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:06:55.216821Z","title":"Demon in the variant: Sta- tistical analysis of DNNs for robust backdoor contamination detection,","venue":null,"work_id":"fdbf7bc8-9c16-4f6d-9cfb-4a2c00a59c6d","year":2021},"citing_paper":{"arxiv_id":"2506.22722","last_updated":"2025-06-28T02:06:23Z","snapshot_observed_at":"2026-08-13T20:37:50.771603Z","submitted_at":"2025-06-28T02:06:23Z","title":"Kill Two Birds with One Stone! Trajectory enabled Unified Online Detection of Adversarial Examples and Backdoor Attacks","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-06T22:06:37.393253Z"},"links":{"citing_paper":"/paper/2506.22722"},"observation_digest":"sha256:860831c67a448b7568656f76dba44e274cc0202e414c4c3a65a53226ff9a85b1","observation_id":"7ae4a53b-2460-4aa8-8d04-512c9744f82c","resolution":{"observed_at":"2026-08-06T22:06:55.279269Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:06:55.037682Z","title":"The\" beatrix","venue":null,"work_id":"83d9f404-9f6e-491e-b882-79a569a05373","year":2023},"citing_paper":{"arxiv_id":"2506.22722","last_updated":"2025-06-28T02:06:23Z","snapshot_observed_at":"2026-08-13T20:37:50.771603Z","submitted_at":"2025-06-28T02:06:23Z","title":"Kill Two Birds with One Stone! Trajectory enabled Unified Online Detection of Adversarial Examples and Backdoor Attacks","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-06T22:06:37.461957Z"},"links":{"citing_paper":"/paper/2506.22722"},"observation_digest":"sha256:c0e550d45f36be969d24472cfcaa89969360140d3f48b60dc3c56b7691a78014","observation_id":"07de9469-ecee-4991-9dd3-25c933df8cfc","resolution":{"observed_at":"2026-08-06T22:06:55.125164Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:06:54.824567Z","title":"NTD: Non-transferability enabled deep learning backdoor detection,","venue":null,"work_id":"df425584-9aea-4964-b187-233d1cef2bac","year":2023},"citing_paper":{"arxiv_id":"2506.22722","last_updated":"2025-06-28T02:06:23Z","snapshot_observed_at":"2026-08-13T20:37:50.771603Z","submitted_at":"2025-06-28T02:06:23Z","title":"Kill Two Birds with One Stone! Trajectory enabled Unified Online Detection of Adversarial Examples and Backdoor Attacks","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-06T22:06:37.524897Z"},"links":{"citing_paper":"/paper/2506.22722"},"observation_digest":"sha256:c4d3fc1e96d3e91c6ae07a9f0619c420de8b0c8d04dd7121ea837f07aaf725a0","observation_id":"a3065070-3de0-4bde-bbc3-fc0a7d396c38","resolution":{"observed_at":"2026-08-06T22:06:54.943972Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:06:54.617475Z","title":"Deep one-class classification,","venue":null,"work_id":"12310d8c-bbda-47ee-8555-0504392b9228","year":2018},"citing_paper":{"arxiv_id":"2506.22722","last_updated":"2025-06-28T02:06:23Z","snapshot_observed_at":"2026-08-13T20:37:50.771603Z","submitted_at":"2025-06-28T02:06:23Z","title":"Kill Two Birds with One Stone! Trajectory enabled Unified Online Detection of Adversarial Examples and Backdoor Attacks","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-06T22:06:37.603577Z"},"links":{"citing_paper":"/paper/2506.22722"},"observation_digest":"sha256:5b15729da6168910800c4f092c21f389fe50b7a5145e54fe5b258b0fffd9534f","observation_id":"0b232110-6327-4e15-9668-61af6f68dc4f","resolution":{"observed_at":"2026-08-06T22:06:54.698495Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:06:37.691070Z","title":"Uniform manifold approximation and pro- jection,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.22722","last_updated":"2025-06-28T02:06:23Z","snapshot_observed_at":"2026-08-13T20:37:50.771603Z","submitted_at":"2025-06-28T02:06:23Z","title":"Kill Two Birds with One Stone! Trajectory enabled Unified Online Detection of Adversarial Examples and Backdoor Attacks","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-06T22:06:37.691070Z"},"links":{"citing_paper":"/paper/2506.22722"},"observation_digest":"sha256:368549ae57df014394e823b9eb457e8d287b004888c1d882fd25eeff3da2af20","observation_id":"20b4fffb-6dea-491e-a786-914335de8784","resolution":{"observed_at":"2026-08-06T22:06:37.691070Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:06:54.438109Z","title":"Trojaning attack on neural networks,","venue":null,"work_id":"a15cbdd4-09d6-4176-b179-aeab810b4df3","year":2019},"citing_paper":{"arxiv_id":"2506.22722","last_updated":"2025-06-28T02:06:23Z","snapshot_observed_at":"2026-08-13T20:37:50.771603Z","submitted_at":"2025-06-28T02:06:23Z","title":"Kill Two Birds with One Stone! Trajectory enabled Unified Online Detection of Adversarial Examples and Backdoor Attacks","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-06T22:06:37.757454Z"},"links":{"citing_paper":"/paper/2506.22722"},"observation_digest":"sha256:620daab855563aee8a46c528ca14f22a2a61496f580632f871b5d07438551163","observation_id":"36d25c32-4d77-4e46-a7ae-f41d1f7e34e4","resolution":{"observed_at":"2026-08-06T22:06:54.515873Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:06:54.253407Z","title":"Ad- versarial example detection for dnn models: A review and experimental comparison,","venue":null,"work_id":"9324d7e4-d745-49c2-90b0-16281ac22219","year":2022},"citing_paper":{"arxiv_id":"2506.22722","last_updated":"2025-06-28T02:06:23Z","snapshot_observed_at":"2026-08-13T20:37:50.771603Z","submitted_at":"2025-06-28T02:06:23Z","title":"Kill Two Birds with One Stone! Trajectory enabled Unified Online Detection of Adversarial Examples and Backdoor Attacks","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-06T22:06:37.823152Z"},"links":{"citing_paper":"/paper/2506.22722"},"observation_digest":"sha256:b68a2b815837b31ba64e0f21befc4e75072b0ca9f758bba174521bd28b255291","observation_id":"2c7bf016-0ed8-4e63-a05e-a8fe8e59cf44","resolution":{"observed_at":"2026-08-06T22:06:54.335740Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:06:54.074819Z","title":"Reducing excessive margin to achieve a better accuracy vs. robustness trade-off,","venue":null,"work_id":"d15c7007-a7b6-44b8-834a-fe7365d43628","year":2021},"citing_paper":{"arxiv_id":"2506.22722","last_updated":"2025-06-28T02:06:23Z","snapshot_observed_at":"2026-08-13T20:37:50.771603Z","submitted_at":"2025-06-28T02:06:23Z","title":"Kill Two Birds with One Stone! Trajectory enabled Unified Online Detection of Adversarial Examples and Backdoor Attacks","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-06T22:06:37.882762Z"},"links":{"citing_paper":"/paper/2506.22722"},"observation_digest":"sha256:f01c50e398f8a0ccced4ed745d8635f41f4250981f98cf77bf228692e23e6987","observation_id":"661df8e4-475e-4460-8c49-ece69cd5fda3","resolution":{"observed_at":"2026-08-06T22:06:54.159088Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:06:37.942724Z","title":"Towards deep learning models resistant to adversarial attacks,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2506.22722","last_updated":"2025-06-28T02:06:23Z","snapshot_observed_at":"2026-08-13T20:37:50.771603Z","submitted_at":"2025-06-28T02:06:23Z","title":"Kill Two Birds with One Stone! Trajectory enabled Unified Online Detection of Adversarial Examples and Backdoor Attacks","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-06T22:06:37.942724Z"},"links":{"citing_paper":"/paper/2506.22722"},"observation_digest":"sha256:566b6995b8e3b8108d9d30d1084882e5840b554d198174b5d76b93a9fba07e8e","observation_id":"bfa51c54-df95-470d-ab29-01ea607abde6","resolution":{"observed_at":"2026-08-06T22:06:37.942724Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:06:53.889700Z","title":"Robust learning meets generative models: Can proxy distributions improve adversarial robustness?","venue":null,"work_id":"0bcfa4bb-6d69-4519-803f-fc98d9f2151f","year":2021},"citing_paper":{"arxiv_id":"2506.22722","last_updated":"2025-06-28T02:06:23Z","snapshot_observed_at":"2026-08-13T20:37:50.771603Z","submitted_at":"2025-06-28T02:06:23Z","title":"Kill Two Birds with One Stone! Trajectory enabled Unified Online Detection of Adversarial Examples and Backdoor Attacks","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-06T22:06:38.005678Z"},"links":{"citing_paper":"/paper/2506.22722"},"observation_digest":"sha256:8405ecbdd93ebc84befe08355d2c972463f468ad837bc2b5c285a8587ef693ce","observation_id":"a9b1bd76-4643-4511-9af8-54f560f78fd5","resolution":{"observed_at":"2026-08-06T22:06:53.974401Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1702.06280","last_updated":"2017-10-17T11:12:44Z","snapshot_observed_at":"2026-08-14T21:15:34.436979Z","submitted_at":"2017-02-21T07:03:11Z","title":"On the (Statistical) Detection of Adversarial Examples","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1702.06280","snapshot_observed_at":"2026-08-06T22:06:38.062223Z","title":"On the (statistical) detection of adversarial examples,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2506.22722","last_updated":"2025-06-28T02:06:23Z","snapshot_observed_at":"2026-08-13T20:37:50.771603Z","submitted_at":"2025-06-28T02:06:23Z","title":"Kill Two Birds with One Stone! Trajectory enabled Unified Online Detection of Adversarial Examples and Backdoor Attacks","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-06T22:06:38.062223Z"},"links":{"cited_paper":"/paper/1702.06280","citing_paper":"/paper/2506.22722"},"observation_digest":"sha256:797a686ae998bd42447f5a093fe9a728df0af0ab2904bdd80d0258260fad45e5","observation_id":"0e59553e-bc35-40a1-ad2f-01a9a4ad5efb","resolution":{"observed_at":"2026-08-06T22:06:38.062223Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1608.00853","last_updated":"2016-08-02T14:57:18Z","snapshot_observed_at":"2026-08-14T21:45:45.137055Z","submitted_at":"2016-08-02T14:57:18Z","title":"A study of the effect of JPG compression on adversarial images","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1608.00853","snapshot_observed_at":"2026-08-06T22:06:38.144387Z","title":"A study of the effect of jpg compression on adversarial images,","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2506.22722","last_updated":"2025-06-28T02:06:23Z","snapshot_observed_at":"2026-08-13T20:37:50.771603Z","submitted_at":"2025-06-28T02:06:23Z","title":"Kill Two Birds with One Stone! Trajectory enabled Unified Online Detection of Adversarial Examples and Backdoor Attacks","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-06T22:06:38.144387Z"},"links":{"cited_paper":"/paper/1608.00853","citing_paper":"/paper/2506.22722"},"observation_digest":"sha256:1a6806669f0b7d9e9f75f452c691eb5bc5bd67d39df3b7451a61a56f706def26","observation_id":"a8133181-2e5d-4bb6-bff8-ecef70d51236","resolution":{"observed_at":"2026-08-06T22:06:38.144387Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:06:53.619650Z","title":"Feature distillation: Dnn-oriented jpeg compression against adversarial examples,","venue":null,"work_id":"c672eddb-6451-415a-8cad-636484686b85","year":2019},"citing_paper":{"arxiv_id":"2506.22722","last_updated":"2025-06-28T02:06:23Z","snapshot_observed_at":"2026-08-13T20:37:50.771603Z","submitted_at":"2025-06-28T02:06:23Z","title":"Kill Two Birds with One Stone! Trajectory enabled Unified Online Detection of Adversarial Examples and Backdoor Attacks","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-06T22:06:38.258777Z"},"links":{"citing_paper":"/paper/2506.22722"},"observation_digest":"sha256:923fa70e5fe1435cddc3ac0c3ab1d5eac3c76171e98642a106cb48e051896bfe","observation_id":"0d7ba932-a4af-44f3-8799-83773b87804c","resolution":{"observed_at":"2026-08-06T22:06:53.768006Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1711.00117","last_updated":"2018-01-25T19:04:48Z","snapshot_observed_at":"2026-08-14T20:18:12.840327Z","submitted_at":"2017-10-31T21:22:16Z","title":"Countering Adversarial Images using Input Transformations","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1711.00117","snapshot_observed_at":"2026-08-06T22:06:38.327244Z","title":"Counter- ing adversarial images using input transformations,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2506.22722","last_updated":"2025-06-28T02:06:23Z","snapshot_observed_at":"2026-08-13T20:37:50.771603Z","submitted_at":"2025-06-28T02:06:23Z","title":"Kill Two Birds with One Stone! Trajectory enabled Unified Online Detection of Adversarial Examples and Backdoor Attacks","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-06T22:06:38.327244Z"},"links":{"cited_paper":"/paper/1711.00117","citing_paper":"/paper/2506.22722"},"observation_digest":"sha256:ce4b15212710657734e7f65b022bcfaeef8c3c28462f5ac0c6de3693261a3bdd","observation_id":"6d3d2939-6ec2-41a5-bb08-0d6a0465cf2f","resolution":{"observed_at":"2026-08-06T22:06:38.327244Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:06:53.285778Z","title":"Deflecting adversarial attacks with pixel deflection,","venue":null,"work_id":"1834ea2a-22ef-438f-8818-42232a2b7278","year":2018},"citing_paper":{"arxiv_id":"2506.22722","last_updated":"2025-06-28T02:06:23Z","snapshot_observed_at":"2026-08-13T20:37:50.771603Z","submitted_at":"2025-06-28T02:06:23Z","title":"Kill Two Birds with One Stone! Trajectory enabled Unified Online Detection of Adversarial Examples and Backdoor Attacks","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-06T22:06:38.427838Z"},"links":{"citing_paper":"/paper/2506.22722"},"observation_digest":"sha256:04d51a3c6b5dbd01fbb0f56bdb8a73ca13ae53a2b64ca1186401a209b4643a1c","observation_id":"9028ef5b-2732-494a-9994-ac5f3960cde5","resolution":{"observed_at":"2026-08-06T22:06:53.454605Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1711.01991","last_updated":"2018-02-28T22:39:15Z","snapshot_observed_at":"2026-08-14T20:16:33.101754Z","submitted_at":"2017-11-06T16:22:54Z","title":"Mitigating Adversarial Effects Through Randomization","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1711.01991","snapshot_observed_at":"2026-08-06T22:06:38.435319Z","title":"Mitigating adversarial effects through randomization,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2506.22722","last_updated":"2025-06-28T02:06:23Z","snapshot_observed_at":"2026-08-13T20:37:50.771603Z","submitted_at":"2025-06-28T02:06:23Z","title":"Kill Two Birds with One Stone! Trajectory enabled Unified Online Detection of Adversarial Examples and Backdoor Attacks","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-06T22:06:38.435319Z"},"links":{"cited_paper":"/paper/1711.01991","citing_paper":"/paper/2506.22722"},"observation_digest":"sha256:3ed30d631cc1da5d6ff43e83c160fba407b877c1c758589ceb6eabe20e49a88e","observation_id":"3f23382f-8b3b-4d76-a44a-f2df8e018921","resolution":{"observed_at":"2026-08-06T22:06:38.435319Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:06:53.021442Z","title":"Defense-gan: Protecting classifiers against adversarial attacks using generative models,","venue":null,"work_id":"308a9a5e-fb63-4404-8279-c5a22c25ea40","year":2018},"citing_paper":{"arxiv_id":"2506.22722","last_updated":"2025-06-28T02:06:23Z","snapshot_observed_at":"2026-08-13T20:37:50.771603Z","submitted_at":"2025-06-28T02:06:23Z","title":"Kill Two Birds with One Stone! Trajectory enabled Unified Online Detection of Adversarial Examples and Backdoor Attacks","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-06T22:06:38.439177Z"},"links":{"citing_paper":"/paper/2506.22722"},"observation_digest":"sha256:3f8e3a442dea0eb4f957da57a8c4b3c6adfc07562ec84dc8889d56db4ed827b9","observation_id":"5aa721c3-4f98-4e03-89fb-da6ce7d68b5b","resolution":{"observed_at":"2026-08-06T22:06:53.138724Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:06:52.695048Z","title":"Eliminating adversarial noise via information discard and robust representation restoration,","venue":null,"work_id":"5b1b5654-c3b4-4815-af7a-c39107357c3c","year":2023},"citing_paper":{"arxiv_id":"2506.22722","last_updated":"2025-06-28T02:06:23Z","snapshot_observed_at":"2026-08-13T20:37:50.771603Z","submitted_at":"2025-06-28T02:06:23Z","title":"Kill Two Birds with One Stone! Trajectory enabled Unified Online Detection of Adversarial Examples and Backdoor Attacks","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-06T22:06:38.478021Z"},"links":{"citing_paper":"/paper/2506.22722"},"observation_digest":"sha256:4b106634aabc5055f121d9c066f15933803383356e9c4e480fb99767f16632dc","observation_id":"33957936-d988-4247-91d2-6e75555f9d18","resolution":{"observed_at":"2026-08-06T22:06:52.855974Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:06:52.468794Z","title":"Diffusion models for adversarial purification,","venue":null,"work_id":"8aa4e6b2-10db-4f42-a997-191b024cd067","year":2022},"citing_paper":{"arxiv_id":"2506.22722","last_updated":"2025-06-28T02:06:23Z","snapshot_observed_at":"2026-08-13T20:37:50.771603Z","submitted_at":"2025-06-28T02:06:23Z","title":"Kill Two Birds with One Stone! Trajectory enabled Unified Online Detection of Adversarial Examples and Backdoor Attacks","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-06T22:06:38.542776Z"},"links":{"citing_paper":"/paper/2506.22722"},"observation_digest":"sha256:ce10da53ede4839e65294b6b69440d8f87c89405d4d926974909c7521185d985","observation_id":"c6e78213-7710-47e3-97b8-0a9885704cf5","resolution":{"observed_at":"2026-08-06T22:06:52.541777Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:06:52.283624Z","title":"DiffSmooth: Certifiably robust learning via diffusion models and local smoothing,","venue":null,"work_id":"15fdbc68-cf25-4af9-a40f-4cd2ad5d56c7","year":2023},"citing_paper":{"arxiv_id":"2506.22722","last_updated":"2025-06-28T02:06:23Z","snapshot_observed_at":"2026-08-13T20:37:50.771603Z","submitted_at":"2025-06-28T02:06:23Z","title":"Kill Two Birds with One Stone! Trajectory enabled Unified Online Detection of Adversarial Examples and Backdoor Attacks","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-06T22:06:38.613516Z"},"links":{"citing_paper":"/paper/2506.22722"},"observation_digest":"sha256:06d7501008dd62a29dd8539dec092933787c80966066b06e6501005116f6f2ed","observation_id":"b0ff07eb-27d6-4ff3-96d8-624f53e3b39a","resolution":{"observed_at":"2026-08-06T22:06:52.374328Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:06:52.091167Z","title":"Characterizing adversarial subspaces using local intrinsic dimensionality,","venue":null,"work_id":"f3b0fa9a-296c-439b-b203-1492f42d6cb2","year":2018},"citing_paper":{"arxiv_id":"2506.22722","last_updated":"2025-06-28T02:06:23Z","snapshot_observed_at":"2026-08-13T20:37:50.771603Z","submitted_at":"2025-06-28T02:06:23Z","title":"Kill Two Birds with One Stone! Trajectory enabled Unified Online Detection of Adversarial Examples and Backdoor Attacks","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-06T22:06:38.745810Z"},"links":{"citing_paper":"/paper/2506.22722"},"observation_digest":"sha256:a1dc29e9431950e09235def84a4e948f4af80969fc1580dd45984ac3487df4bc","observation_id":"d7120e02-cc06-47a2-bca7-d69f3e0b4be4","resolution":{"observed_at":"2026-08-06T22:06:52.180710Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1803.04765","last_updated":"2018-03-13T13:02:13Z","snapshot_observed_at":"2026-08-14T19:36:43.134642Z","submitted_at":"2018-03-13T13:02:13Z","title":"Deep k-Nearest Neighbors: Towards Confident, Interpretable and Robust Deep Learning","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1803.04765","snapshot_observed_at":"2026-08-06T22:06:38.928156Z","title":"Deep k-nearest neighbors: Towards confident, interpretable and robust deep learning,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2506.22722","last_updated":"2025-06-28T02:06:23Z","snapshot_observed_at":"2026-08-13T20:37:50.771603Z","submitted_at":"2025-06-28T02:06:23Z","title":"Kill Two Birds with One Stone! Trajectory enabled Unified Online Detection of Adversarial Examples and Backdoor Attacks","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-06T22:06:38.928156Z"},"links":{"cited_paper":"/paper/1803.04765","citing_paper":"/paper/2506.22722"},"observation_digest":"sha256:282e893e2e4b692cc997b1cfc6634c996fb9a013df52ca929477cefd24e212b2","observation_id":"ae0a0da2-d9d3-46b4-b283-e3f3b289e62a","resolution":{"observed_at":"2026-08-06T22:06:38.928156Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1703.00410","last_updated":"2017-11-15T23:31:59Z","snapshot_observed_at":"2026-08-14T21:14:04.215100Z","submitted_at":"2017-03-01T17:43:10Z","title":"Detecting Adversarial Samples from Artifacts","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1703.00410","snapshot_observed_at":"2026-08-06T22:06:39.095628Z","title":"Detecting adversarial samples from artifacts,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2506.22722","last_updated":"2025-06-28T02:06:23Z","snapshot_observed_at":"2026-08-13T20:37:50.771603Z","submitted_at":"2025-06-28T02:06:23Z","title":"Kill Two Birds with One Stone! Trajectory enabled Unified Online Detection of Adversarial Examples and Backdoor Attacks","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-06T22:06:39.095628Z"},"links":{"cited_paper":"/paper/1703.00410","citing_paper":"/paper/2506.22722"},"observation_digest":"sha256:100f01130fc63333242676cc8809effd8c3be53adafb95cfe3b4a16c9f10fe26","observation_id":"b61d3589-fb13-4388-ba51-abff7b2db355","resolution":{"observed_at":"2026-08-06T22:06:39.095628Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:06:51.968396Z","title":"A simple unified framework for detecting out-of-distribution samples and adversarial attacks,","venue":null,"work_id":"6c548488-4134-4822-87bb-27b07a505bd4","year":2018},"citing_paper":{"arxiv_id":"2506.22722","last_updated":"2025-06-28T02:06:23Z","snapshot_observed_at":"2026-08-13T20:37:50.771603Z","submitted_at":"2025-06-28T02:06:23Z","title":"Kill Two Birds with One Stone! Trajectory enabled Unified Online Detection of Adversarial Examples and Backdoor Attacks","version":1},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-06T22:06:39.213178Z"},"links":{"citing_paper":"/paper/2506.22722"},"observation_digest":"sha256:def9a9ddec7b40b1cccb4433aa82c83397130597c8726f826e1b1411275649b6","observation_id":"03120a87-b802-4dee-be68-d5ee8527e3ac","resolution":{"observed_at":"2026-08-06T22:06:52.021965Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:06:51.858734Z","title":"Adversarial example detection using latent neighborhood graph,","venue":null,"work_id":"bd65d586-5be8-4e76-a5e5-f2cbb6c5be56","year":2021},"citing_paper":{"arxiv_id":"2506.22722","last_updated":"2025-06-28T02:06:23Z","snapshot_observed_at":"2026-08-13T20:37:50.771603Z","submitted_at":"2025-06-28T02:06:23Z","title":"Kill Two Birds with One Stone! Trajectory enabled Unified Online Detection of Adversarial Examples and Backdoor Attacks","version":1},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-06T22:06:39.389844Z"},"links":{"citing_paper":"/paper/2506.22722"},"observation_digest":"sha256:029f7d6d9acfe6e7b8282b49ca64719167d9f29e141bac22d2855545689883f5","observation_id":"898512d8-a699-4406-b909-152f82bf4ddb","resolution":{"observed_at":"2026-08-06T22:06:51.914844Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:06:51.747202Z","title":"Towards certifiable adversarial sample detection,","venue":null,"work_id":"cb7f5863-06ca-467b-ae0d-71fb0befbfbd","year":2020},"citing_paper":{"arxiv_id":"2506.22722","last_updated":"2025-06-28T02:06:23Z","snapshot_observed_at":"2026-08-13T20:37:50.771603Z","submitted_at":"2025-06-28T02:06:23Z","title":"Kill Two Birds with One Stone! Trajectory enabled Unified Online Detection of Adversarial Examples and Backdoor Attacks","version":1},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-06T22:06:39.568838Z"},"links":{"citing_paper":"/paper/2506.22722"},"observation_digest":"sha256:a5a358f2c49d6541a4c5c733cd2fa0885812e3e7aba25b609d716cd8ecf05e16","observation_id":"e5c4e9c8-791b-4b02-aa7d-2e33cc7720f1","resolution":{"observed_at":"2026-08-06T22:06:51.802612Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:06:51.635903Z","title":"Objectseeker: Certifiably robust object detection against patch hiding attacks via patch- agnostic masking,","venue":null,"work_id":"2602c7f9-3add-4537-a23a-d2cefed3b437","year":2023},"citing_paper":{"arxiv_id":"2506.22722","last_updated":"2025-06-28T02:06:23Z","snapshot_observed_at":"2026-08-13T20:37:50.771603Z","submitted_at":"2025-06-28T02:06:23Z","title":"Kill Two Birds with One Stone! Trajectory enabled Unified Online Detection of Adversarial Examples and Backdoor Attacks","version":1},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-06T22:06:39.721260Z"},"links":{"citing_paper":"/paper/2506.22722"},"observation_digest":"sha256:e7a340df0d1787f852cbe9d455d8f0dcea0189bdfc00fa066ff7631757812a85","observation_id":"9a1b9741-47e3-4964-868d-07d59677b7d5","resolution":{"observed_at":"2026-08-06T22:06:51.696143Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:06:51.498552Z","title":"CAS- SOCK: Viable backdoor attacks against DNN in the wall of source- specific backdoor defences,","venue":null,"work_id":"28569fec-b52a-4445-af92-52751a25569c","year":2023},"citing_paper":{"arxiv_id":"2506.22722","last_updated":"2025-06-28T02:06:23Z","snapshot_observed_at":"2026-08-13T20:37:50.771603Z","submitted_at":"2025-06-28T02:06:23Z","title":"Kill Two Birds with One Stone! Trajectory enabled Unified Online Detection of Adversarial Examples and Backdoor Attacks","version":1},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-06T22:06:39.883234Z"},"links":{"citing_paper":"/paper/2506.22722"},"observation_digest":"sha256:9d4e346b22ed76cc49aa1771863b29eccfd0c8835b56d6c655126e57c64007f8","observation_id":"e909bcdb-8e25-4dd3-8e08-bfd75e0bf351","resolution":{"observed_at":"2026-08-06T22:06:51.563088Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:06:51.379253Z","title":"Neural Cleanse: Identifying and mitigating backdoor attacks in neural networks,","venue":null,"work_id":"13bfa43c-97c7-4ad4-99f2-69117b6d2e04","year":2019},"citing_paper":{"arxiv_id":"2506.22722","last_updated":"2025-06-28T02:06:23Z","snapshot_observed_at":"2026-08-13T20:37:50.771603Z","submitted_at":"2025-06-28T02:06:23Z","title":"Kill Two Birds with One Stone! Trajectory enabled Unified Online Detection of Adversarial Examples and Backdoor Attacks","version":1},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-08-06T22:06:40.047282Z"},"links":{"citing_paper":"/paper/2506.22722"},"observation_digest":"sha256:68d69e8527b31b37b27589b7a10b5743d85998d3ffefc2a851a53a37b5719d28","observation_id":"cfbdcfeb-d7f5-4723-a2c3-846b8ea87bb5","resolution":{"observed_at":"2026-08-06T22:06:51.442155Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:06:51.271236Z","title":"Watch out! simple horizontal class backdoor can trivially evade defense,","venue":null,"work_id":"14166ccc-5e04-4163-b25d-0915da0b2a2d","year":2024},"citing_paper":{"arxiv_id":"2506.22722","last_updated":"2025-06-28T02:06:23Z","snapshot_observed_at":"2026-08-13T20:37:50.771603Z","submitted_at":"2025-06-28T02:06:23Z","title":"Kill Two Birds with One Stone! Trajectory enabled Unified Online Detection of Adversarial Examples and Backdoor Attacks","version":1},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-08-06T22:06:40.222012Z"},"links":{"citing_paper":"/paper/2506.22722"},"observation_digest":"sha256:66da74ea9a29d309461b94ad1001c7410b657874bcefcaed50024294f1bc74b9","observation_id":"32f9cc7e-0450-4f2b-9110-ddc18ed7b8a6","resolution":{"observed_at":"2026-08-06T22:06:51.326576Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1712.05526","last_updated":"2017-12-15T04:26:26Z","snapshot_observed_at":"2026-07-06T06:14:30.795326Z","submitted_at":"2017-12-15T04:26:26Z","title":"Targeted Backdoor Attacks on Deep Learning Systems Using Data Poisoning","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1712.05526","snapshot_observed_at":"2026-08-06T22:06:40.384122Z","title":"Targeted backdoor attacks on deep learning systems using data poisoning,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2506.22722","last_updated":"2025-06-28T02:06:23Z","snapshot_observed_at":"2026-08-13T20:37:50.771603Z","submitted_at":"2025-06-28T02:06:23Z","title":"Kill Two Birds with One Stone! Trajectory enabled Unified Online Detection of Adversarial Examples and Backdoor Attacks","version":1},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-08-06T22:06:40.384122Z"},"links":{"cited_paper":"/paper/1712.05526","citing_paper":"/paper/2506.22722"},"observation_digest":"sha256:986c249e09c0cf167f6befc94cec3ae7125994ea3b9f653febe3f0c5c4e09977","observation_id":"2dc890ca-3687-4c57-acd7-b217d79f15cc","resolution":{"observed_at":"2026-08-06T22:06:40.384122Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2102.10369","last_updated":"2021-03-04T04:09:38Z","snapshot_observed_at":"2026-08-15T08:31:11.702918Z","submitted_at":"2021-02-20T15:25:36Z","title":"WaNet -- Imperceptible Warping-based Backdoor Attack","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2102.10369","snapshot_observed_at":"2026-08-06T22:06:40.498394Z","title":"Wanet–imperceptible warping-based backdoor attack,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2506.22722","last_updated":"2025-06-28T02:06:23Z","snapshot_observed_at":"2026-08-13T20:37:50.771603Z","submitted_at":"2025-06-28T02:06:23Z","title":"Kill Two Birds with One Stone! Trajectory enabled Unified Online Detection of Adversarial Examples and Backdoor Attacks","version":1},"reference_index":58,"source":"pdf_text","source_observed_at":"2026-08-06T22:06:40.498394Z"},"links":{"cited_paper":"/paper/2102.10369","citing_paper":"/paper/2506.22722"},"observation_digest":"sha256:1a12b7ae7cc79d139d0d29831718491d6f60a2112a9289ca317fa341de0922a8","observation_id":"4561f514-ddbb-486f-9fa9-4282b8b0e3b7","resolution":{"observed_at":"2026-08-06T22:06:40.498394Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:06:51.155290Z","title":"Invisible backdoor attack with sample-specific triggers,","venue":null,"work_id":"a63945e4-09d5-441f-b555-e3e48323f9bc","year":2021},"citing_paper":{"arxiv_id":"2506.22722","last_updated":"2025-06-28T02:06:23Z","snapshot_observed_at":"2026-08-13T20:37:50.771603Z","submitted_at":"2025-06-28T02:06:23Z","title":"Kill Two Birds with One Stone! Trajectory enabled Unified Online Detection of Adversarial Examples and Backdoor Attacks","version":1},"reference_index":59,"source":"pdf_text","source_observed_at":"2026-08-06T22:06:40.574290Z"},"links":{"citing_paper":"/paper/2506.22722"},"observation_digest":"sha256:c954935a7a307f63f638fb2b9ab6b2042d6ddf02705dedebc07f3fc1ec2c4459","observation_id":"d11879e2-ba97-4bce-8eae-b9892e983b6a","resolution":{"observed_at":"2026-08-06T22:06:51.217450Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:06:51.011172Z","title":"Anti-backdoor learning: Training clean models on poisoned data,","venue":null,"work_id":"13e646cd-24c7-4da5-9a93-54337331a2b3","year":2021},"citing_paper":{"arxiv_id":"2506.22722","last_updated":"2025-06-28T02:06:23Z","snapshot_observed_at":"2026-08-13T20:37:50.771603Z","submitted_at":"2025-06-28T02:06:23Z","title":"Kill Two Birds with One Stone! Trajectory enabled Unified Online Detection of Adversarial Examples and Backdoor Attacks","version":1},"reference_index":60,"source":"pdf_text","source_observed_at":"2026-08-06T22:06:40.661160Z"},"links":{"citing_paper":"/paper/2506.22722"},"observation_digest":"sha256:1f1165a03097a77596e22426427267a9a2dae314889fc5815bfc51615a38aa96","observation_id":"a68c69df-27c4-4925-a006-89d72fb39be0","resolution":{"observed_at":"2026-08-06T22:06:51.073595Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:06:50.881165Z","title":"Model orthogonalization: Class distance hardening in neural networks for better security,","venue":null,"work_id":"3f0502b1-638e-40c6-97f9-9fdcfc0407e1","year":2022},"citing_paper":{"arxiv_id":"2506.22722","last_updated":"2025-06-28T02:06:23Z","snapshot_observed_at":"2026-08-13T20:37:50.771603Z","submitted_at":"2025-06-28T02:06:23Z","title":"Kill Two Birds with One Stone! Trajectory enabled Unified Online Detection of Adversarial Examples and Backdoor Attacks","version":1},"reference_index":61,"source":"pdf_text","source_observed_at":"2026-08-06T22:06:40.719144Z"},"links":{"citing_paper":"/paper/2506.22722"},"observation_digest":"sha256:1a598da517725a489086e65f22288fdabbaa5df5870cbf05e806fa144e51f926","observation_id":"c164ec78-ea2c-4377-bc20-4f306c1fd46c","resolution":{"observed_at":"2026-08-06T22:06:50.938713Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:06:50.718672Z","title":"Backdoor defense via decoupling the training process,","venue":null,"work_id":"9592636d-4414-4a8c-bbd0-b354da052c7e","year":2022},"citing_paper":{"arxiv_id":"2506.22722","last_updated":"2025-06-28T02:06:23Z","snapshot_observed_at":"2026-08-13T20:37:50.771603Z","submitted_at":"2025-06-28T02:06:23Z","title":"Kill Two Birds with One Stone! Trajectory enabled Unified Online Detection of Adversarial Examples and Backdoor Attacks","version":1},"reference_index":62,"source":"pdf_text","source_observed_at":"2026-08-06T22:06:40.806046Z"},"links":{"citing_paper":"/paper/2506.22722"},"observation_digest":"sha256:505478fdc7397af89d364483e5592bf1535bc17e500e19856ca3320e1a53ea68","observation_id":"ae189195-d7bf-4b43-b2c9-dcda82cef7de","resolution":{"observed_at":"2026-08-06T22:06:50.802170Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:06:50.508644Z","title":"REDEEM MYSELF: Purifying backdoors in deep learning models using self attention distillation,","venue":null,"work_id":"daf868c8-a902-444e-be4a-cad05dbfd27a","year":2023},"citing_paper":{"arxiv_id":"2506.22722","last_updated":"2025-06-28T02:06:23Z","snapshot_observed_at":"2026-08-13T20:37:50.771603Z","submitted_at":"2025-06-28T02:06:23Z","title":"Kill Two Birds with One Stone! Trajectory enabled Unified Online Detection of Adversarial Examples and Backdoor Attacks","version":1},"reference_index":63,"source":"pdf_text","source_observed_at":"2026-08-06T22:06:40.898377Z"},"links":{"citing_paper":"/paper/2506.22722"},"observation_digest":"sha256:9fd85c9809f1ea36b62a1bae112ef90b3519bb98a18a870d76d62c5feb9e7fa4","observation_id":"7989b32c-3dd6-462a-bcd6-3d736ca03ef6","resolution":{"observed_at":"2026-08-06T22:06:50.597232Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:06:50.360102Z","title":"Selective amnesia: On efficient, high-fidelity and blind suppression of backdoor effects in trojaned machine learning models,","venue":null,"work_id":"b86968c7-8c5b-4319-8b1d-1ddffbfbc9f5","year":2023},"citing_paper":{"arxiv_id":"2506.22722","last_updated":"2025-06-28T02:06:23Z","snapshot_observed_at":"2026-08-13T20:37:50.771603Z","submitted_at":"2025-06-28T02:06:23Z","title":"Kill Two Birds with One Stone! Trajectory enabled Unified Online Detection of Adversarial Examples and Backdoor Attacks","version":1},"reference_index":64,"source":"pdf_text","source_observed_at":"2026-08-06T22:06:40.985965Z"},"links":{"citing_paper":"/paper/2506.22722"},"observation_digest":"sha256:401779588d4dfd8cd9f0d38e13352e3abfed474a217faabef2162235ec5429c4","observation_id":"0d6f51fd-05ed-41d2-a6f2-da8eae958409","resolution":{"observed_at":"2026-08-06T22:06:50.424882Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:06:50.197802Z","title":"Fine-pruning: Defending against backdooring attacks on deep neural networks,","venue":null,"work_id":"2edeb070-99a9-4883-9071-d41d5a5f4851","year":2018},"citing_paper":{"arxiv_id":"2506.22722","last_updated":"2025-06-28T02:06:23Z","snapshot_observed_at":"2026-08-13T20:37:50.771603Z","submitted_at":"2025-06-28T02:06:23Z","title":"Kill Two Birds with One Stone! Trajectory enabled Unified Online Detection of Adversarial Examples and Backdoor Attacks","version":1},"reference_index":65,"source":"pdf_text","source_observed_at":"2026-08-06T22:06:41.052384Z"},"links":{"citing_paper":"/paper/2506.22722"},"observation_digest":"sha256:85f5a71a1e569c9e535ff7739614ae63f859f0cf18fbc17ecc0fbff310a044cb","observation_id":"5762d932-cb5e-490f-b840-2c58cd5d1602","resolution":{"observed_at":"2026-08-06T22:06:50.284269Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:06:49.970879Z","title":"Black-box backdoor defense via zero-shot image purification,","venue":null,"work_id":"b4d21746-4a2b-439e-b07a-c6e9c02a34cf","year":2023},"citing_paper":{"arxiv_id":"2506.22722","last_updated":"2025-06-28T02:06:23Z","snapshot_observed_at":"2026-08-13T20:37:50.771603Z","submitted_at":"2025-06-28T02:06:23Z","title":"Kill Two Birds with One Stone! Trajectory enabled Unified Online Detection of Adversarial Examples and Backdoor Attacks","version":1},"reference_index":66,"source":"pdf_text","source_observed_at":"2026-08-06T22:06:41.130244Z"},"links":{"citing_paper":"/paper/2506.22722"},"observation_digest":"sha256:f754426d231354c9e8352cea89f0c5de308d7048a5b3d51d40f249848e8ef516","observation_id":"119fbae6-d716-4e66-8b7e-d5c095284e95","resolution":{"observed_at":"2026-08-06T22:06:50.079583Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:06:49.817044Z","title":"Black- box detection of backdoor attacks with limited information and data,","venue":null,"work_id":"2e294b27-5b80-4970-954f-5423c35b38c6","year":2021},"citing_paper":{"arxiv_id":"2506.22722","last_updated":"2025-06-28T02:06:23Z","snapshot_observed_at":"2026-08-13T20:37:50.771603Z","submitted_at":"2025-06-28T02:06:23Z","title":"Kill Two Birds with One Stone! Trajectory enabled Unified Online Detection of Adversarial Examples and Backdoor Attacks","version":1},"reference_index":67,"source":"pdf_text","source_observed_at":"2026-08-06T22:06:41.313801Z"},"links":{"citing_paper":"/paper/2506.22722"},"observation_digest":"sha256:f885fa9f4b5f8c777b6ae561ca860f8196a53e5804a437fa5c40b102b4a5a202","observation_id":"cfbd81da-70b7-474b-b462-5995759b03fd","resolution":{"observed_at":"2026-08-06T22:06:49.891981Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:06:49.620758Z","title":"Towards inspecting and eliminating trojan backdoors in deep neural networks,","venue":null,"work_id":"928b8253-52b3-461a-b328-183224efc1aa","year":2020},"citing_paper":{"arxiv_id":"2506.22722","last_updated":"2025-06-28T02:06:23Z","snapshot_observed_at":"2026-08-13T20:37:50.771603Z","submitted_at":"2025-06-28T02:06:23Z","title":"Kill Two Birds with One Stone! Trajectory enabled Unified Online Detection of Adversarial Examples and Backdoor Attacks","version":1},"reference_index":68,"source":"pdf_text","source_observed_at":"2026-08-06T22:06:41.438336Z"},"links":{"citing_paper":"/paper/2506.22722"},"observation_digest":"sha256:e29ff98bb4d3aa52f1958f46e3d30ee1f32ec05c3a38e33e5d11376401ebf6d0","observation_id":"6a018c8c-5ed6-4c9d-9dc5-26974166eec9","resolution":{"observed_at":"2026-08-06T22:06:49.698062Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:06:49.450585Z","title":"ABS: Scanning neural networks for backdoors by artificial brain stimulation,","venue":null,"work_id":"5285c9ff-81df-4782-b74e-62c1a8466484","year":2019},"citing_paper":{"arxiv_id":"2506.22722","last_updated":"2025-06-28T02:06:23Z","snapshot_observed_at":"2026-08-13T20:37:50.771603Z","submitted_at":"2025-06-28T02:06:23Z","title":"Kill Two Birds with One Stone! Trajectory enabled Unified Online Detection of Adversarial Examples and Backdoor Attacks","version":1},"reference_index":69,"source":"pdf_text","source_observed_at":"2026-08-06T22:06:41.557706Z"},"links":{"citing_paper":"/paper/2506.22722"},"observation_digest":"sha256:b84e3e4c5d64aabda8b4225a0be6c66f418149a0a55c445079b7d74c38d9c9f5","observation_id":"b0c2a86a-b165-4b0e-9d84-6aa4c5a6fcde","resolution":{"observed_at":"2026-08-06T22:06:49.545881Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:06:49.287584Z","title":"DeepInspect: A black-box Trojan detection and mitigation framework for deep neural networks,","venue":null,"work_id":"bf5e3bc7-bc62-4a8e-beb9-88f6eacb4092","year":2019},"citing_paper":{"arxiv_id":"2506.22722","last_updated":"2025-06-28T02:06:23Z","snapshot_observed_at":"2026-08-13T20:37:50.771603Z","submitted_at":"2025-06-28T02:06:23Z","title":"Kill Two Birds with One Stone! Trajectory enabled Unified Online Detection of Adversarial Examples and Backdoor Attacks","version":1},"reference_index":70,"source":"pdf_text","source_observed_at":"2026-08-06T22:06:41.731457Z"},"links":{"citing_paper":"/paper/2506.22722"},"observation_digest":"sha256:c3936eeb6f490388e99b0ce9022afbacf9eda7b882fc9eb60832758ffaf8b108","observation_id":"1c6de3ea-5499-47e2-a05c-cfbd6a16e055","resolution":{"observed_at":"2026-08-06T22:06:49.372386Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:06:49.088696Z","title":"Detecting AI trojans using meta neural analysis,","venue":null,"work_id":"be7b77d6-a2a3-4972-a566-ef88cb2ed5ce","year":2021},"citing_paper":{"arxiv_id":"2506.22722","last_updated":"2025-06-28T02:06:23Z","snapshot_observed_at":"2026-08-13T20:37:50.771603Z","submitted_at":"2025-06-28T02:06:23Z","title":"Kill Two Birds with One Stone! Trajectory enabled Unified Online Detection of Adversarial Examples and Backdoor Attacks","version":1},"reference_index":71,"source":"pdf_text","source_observed_at":"2026-08-06T22:06:41.906754Z"},"links":{"citing_paper":"/paper/2506.22722"},"observation_digest":"sha256:318538f6992191fdcb9131669150a05f584bb6739feeae2531309bbc388798bc","observation_id":"111344f2-4278-48c4-a8b1-666cb34dc968","resolution":{"observed_at":"2026-08-06T22:06:49.175956Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:06:48.885479Z","title":"Universal litmus patterns: Revealing backdoor attacks in CNNs,","venue":null,"work_id":"a45da6ae-896c-4bbb-a060-379064bcb370","year":2020},"citing_paper":{"arxiv_id":"2506.22722","last_updated":"2025-06-28T02:06:23Z","snapshot_observed_at":"2026-08-13T20:37:50.771603Z","submitted_at":"2025-06-28T02:06:23Z","title":"Kill Two Birds with One Stone! Trajectory enabled Unified Online Detection of Adversarial Examples and Backdoor Attacks","version":1},"reference_index":72,"source":"pdf_text","source_observed_at":"2026-08-06T22:06:42.087508Z"},"links":{"citing_paper":"/paper/2506.22722"},"observation_digest":"sha256:dd1909961b3cb3e7a29e7eff96dfbe7aa145ddde965d9b23a2df1ab99b1cdec9","observation_id":"9341b370-8be4-4881-b2b2-9affb48036af","resolution":{"observed_at":"2026-08-06T22:06:48.960404Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:06:48.718617Z","title":"Trojan signatures in DNN weights,","venue":null,"work_id":"3ce96c27-78cb-4bd9-8fb7-16fdba22e857","year":2021},"citing_paper":{"arxiv_id":"2506.22722","last_updated":"2025-06-28T02:06:23Z","snapshot_observed_at":"2026-08-13T20:37:50.771603Z","submitted_at":"2025-06-28T02:06:23Z","title":"Kill Two Birds with One Stone! Trajectory enabled Unified Online Detection of Adversarial Examples and Backdoor Attacks","version":1},"reference_index":73,"source":"pdf_text","source_observed_at":"2026-08-06T22:06:42.267765Z"},"links":{"citing_paper":"/paper/2506.22722"},"observation_digest":"sha256:11612565a67bb141ecf3fb4b264c26f28f72db101aafd278401a57f4892b4467","observation_id":"cda37c90-4ccf-4b2f-b5dd-e66f749f69d1","resolution":{"observed_at":"2026-08-06T22:06:48.807138Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:06:48.499600Z","title":"Try to poison my deep learning data? nowhere to hide your trajectory spectrum!","venue":null,"work_id":"13e221e3-493b-4ba0-b67c-efffd404279f","year":2025},"citing_paper":{"arxiv_id":"2506.22722","last_updated":"2025-06-28T02:06:23Z","snapshot_observed_at":"2026-08-13T20:37:50.771603Z","submitted_at":"2025-06-28T02:06:23Z","title":"Kill Two Birds with One Stone! Trajectory enabled Unified Online Detection of Adversarial Examples and Backdoor Attacks","version":1},"reference_index":74,"source":"pdf_text","source_observed_at":"2026-08-06T22:06:42.423332Z"},"links":{"citing_paper":"/paper/2506.22722"},"observation_digest":"sha256:69d374d5d5215d993e3a7faf02449ca7d32cd5eb12c9d726384b221408e0cdff","observation_id":"b729dd9a-7d54-41a8-849a-75d49fd24bd8","resolution":{"observed_at":"2026-08-06T22:06:48.591344Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:06:48.345621Z","title":"Towards a proactive ML approach for detecting backdoor poison samples,","venue":null,"work_id":"63bf51b7-fdda-4098-9256-60074770b3d8","year":2023},"citing_paper":{"arxiv_id":"2506.22722","last_updated":"2025-06-28T02:06:23Z","snapshot_observed_at":"2026-08-13T20:37:50.771603Z","submitted_at":"2025-06-28T02:06:23Z","title":"Kill Two Birds with One Stone! Trajectory enabled Unified Online Detection of Adversarial Examples and Backdoor Attacks","version":1},"reference_index":75,"source":"pdf_text","source_observed_at":"2026-08-06T22:06:42.595033Z"},"links":{"citing_paper":"/paper/2506.22722"},"observation_digest":"sha256:53f35e41ed21d65e910c627e962dee1c768e2ab5da4726a345b983406661a56c","observation_id":"f7d53cff-c43b-44dc-9065-caa32671a3cd","resolution":{"observed_at":"2026-08-06T22:06:48.429094Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:06:48.163805Z","title":"ASSET: Robust backdoor data detection across a multiplicity of deep learning paradigms,","venue":null,"work_id":"0046e25c-9bde-4b7b-ade8-79d052770a15","year":2023},"citing_paper":{"arxiv_id":"2506.22722","last_updated":"2025-06-28T02:06:23Z","snapshot_observed_at":"2026-08-13T20:37:50.771603Z","submitted_at":"2025-06-28T02:06:23Z","title":"Kill Two Birds with One Stone! Trajectory enabled Unified Online Detection of Adversarial Examples and Backdoor Attacks","version":1},"reference_index":76,"source":"pdf_text","source_observed_at":"2026-08-06T22:06:42.717718Z"},"links":{"citing_paper":"/paper/2506.22722"},"observation_digest":"sha256:8597081712551fb4bc1b2125764daba0a2a2581643bc8365ae92a984e0defa77","observation_id":"68a23d9e-3c81-4a03-b794-6f88e1f9e1d1","resolution":{"observed_at":"2026-08-06T22:06:48.255650Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:06:47.901611Z","title":"Support vector data description,","venue":null,"work_id":"fe73edf4-427c-4a32-9101-be1ccf40f57c","year":2004},"citing_paper":{"arxiv_id":"2506.22722","last_updated":"2025-06-28T02:06:23Z","snapshot_observed_at":"2026-08-13T20:37:50.771603Z","submitted_at":"2025-06-28T02:06:23Z","title":"Kill Two Birds with One Stone! Trajectory enabled Unified Online Detection of Adversarial Examples and Backdoor Attacks","version":1},"reference_index":77,"source":"pdf_text","source_observed_at":"2026-08-06T22:06:42.841408Z"},"links":{"citing_paper":"/paper/2506.22722"},"observation_digest":"sha256:8a55fd4394ef2892e3e4fd84bf3942ef0ed57023ca859f672cf8d50a79ad57b8","observation_id":"341bfc5f-47dd-4296-84cd-a6e2a3dbbc5f","resolution":{"observed_at":"2026-08-06T22:06:48.028463Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1802.03426","last_updated":"2020-09-18T01:56:41Z","snapshot_observed_at":"2026-08-02T15:32:07.466568Z","submitted_at":"2018-02-09T19:39:33Z","title":"UMAP: Uniform Manifold Approximation and Projection for Dimension Reduction","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1802.03426","snapshot_observed_at":"2026-08-06T22:06:42.948346Z","title":"Umap: Uniform manifold approximation and projection for dimension reduction,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2506.22722","last_updated":"2025-06-28T02:06:23Z","snapshot_observed_at":"2026-08-13T20:37:50.771603Z","submitted_at":"2025-06-28T02:06:23Z","title":"Kill Two Birds with One Stone! Trajectory enabled Unified Online Detection of Adversarial Examples and Backdoor Attacks","version":1},"reference_index":78,"source":"pdf_text","source_observed_at":"2026-08-06T22:06:42.948346Z"},"links":{"cited_paper":"/paper/1802.03426","citing_paper":"/paper/2506.22722"},"observation_digest":"sha256:8f94807967d01305879bd7c680e4dcf7eb8d786344815ab9ff60ed2b6f5533b0","observation_id":"76cd160e-8e7b-4762-966e-97ebb853b256","resolution":{"observed_at":"2026-08-06T22:06:42.948346Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1706.06083","last_updated":"2019-09-04T18:53:10Z","snapshot_observed_at":"2026-08-07T14:27:46.872660Z","submitted_at":"2017-06-19T17:53:11Z","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1706.06083","snapshot_observed_at":"2026-08-06T22:06:43.067827Z","title":"Towards deep learning models resistant to adversarial attacks,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2506.22722","last_updated":"2025-06-28T02:06:23Z","snapshot_observed_at":"2026-08-13T20:37:50.771603Z","submitted_at":"2025-06-28T02:06:23Z","title":"Kill Two Birds with One Stone! Trajectory enabled Unified Online Detection of Adversarial Examples and Backdoor Attacks","version":1},"reference_index":79,"source":"pdf_text","source_observed_at":"2026-08-06T22:06:43.067827Z"},"links":{"cited_paper":"/paper/1706.06083","citing_paper":"/paper/2506.22722"},"observation_digest":"sha256:8d8d33d16469ea6cd0b20d6296196cd8eaa6a8e0f70a99f67e40fff3509f7182","observation_id":"e4b09f8b-4da9-4d9e-8411-3d89e4870d71","resolution":{"observed_at":"2026-08-06T22:06:43.067827Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:06:47.738838Z","title":"Adversarial examples in the physical world,","venue":null,"work_id":"556a555c-89f7-4ac2-acb3-0d06efe23313","year":2018},"citing_paper":{"arxiv_id":"2506.22722","last_updated":"2025-06-28T02:06:23Z","snapshot_observed_at":"2026-08-13T20:37:50.771603Z","submitted_at":"2025-06-28T02:06:23Z","title":"Kill Two Birds with One Stone! Trajectory enabled Unified Online Detection of Adversarial Examples and Backdoor Attacks","version":1},"reference_index":80,"source":"pdf_text","source_observed_at":"2026-08-06T22:06:43.218681Z"},"links":{"citing_paper":"/paper/2506.22722"},"observation_digest":"sha256:3096dbf9a4093660868c6b7d7ce1e622ad5ecb00eade120b8d35c16fdac458bb","observation_id":"e735ed33-bd8b-49d9-9e65-58f36730c6e0","resolution":{"observed_at":"2026-08-06T22:06:47.819341Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:06:47.543570Z","title":"Towards evaluating the robustness of neural networks,","venue":null,"work_id":"7edb07d7-6ac9-42cd-b182-2a24296e44f2","year":2017},"citing_paper":{"arxiv_id":"2506.22722","last_updated":"2025-06-28T02:06:23Z","snapshot_observed_at":"2026-08-13T20:37:50.771603Z","submitted_at":"2025-06-28T02:06:23Z","title":"Kill Two Birds with One Stone! Trajectory enabled Unified Online Detection of Adversarial Examples and Backdoor Attacks","version":1},"reference_index":81,"source":"pdf_text","source_observed_at":"2026-08-06T22:06:43.338770Z"},"links":{"citing_paper":"/paper/2506.22722"},"observation_digest":"sha256:3a90c44c0dca8ab555f28bf3253288c2c219712a0286fd663853bb7e4767f580","observation_id":"d4d3303f-6918-4d3b-aa86-dbb802735819","resolution":{"observed_at":"2026-08-06T22:06:47.633986Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:06:47.258473Z","title":"Deepfool: a simple and accurate method to fool deep neural networks,","venue":null,"work_id":"14aa9e28-fd1d-427a-be34-1d47021f9593","year":2016},"citing_paper":{"arxiv_id":"2506.22722","last_updated":"2025-06-28T02:06:23Z","snapshot_observed_at":"2026-08-13T20:37:50.771603Z","submitted_at":"2025-06-28T02:06:23Z","title":"Kill Two Birds with One Stone! Trajectory enabled Unified Online Detection of Adversarial Examples and Backdoor Attacks","version":1},"reference_index":82,"source":"pdf_text","source_observed_at":"2026-08-06T22:06:43.485836Z"},"links":{"citing_paper":"/paper/2506.22722"},"observation_digest":"sha256:465dee900e3eff54515eaaed812dfb20ea6bc9d74d2b7165ccdeec642c7c3cae","observation_id":"29ab1df8-2b4c-4d6f-b75b-885dba17259f","resolution":{"observed_at":"2026-08-06T22:06:47.404017Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:06:47.033015Z","title":"The limitations of deep learning in adversarial settings,","venue":null,"work_id":"28a2cc58-c93f-4ab9-a893-608e1d0451d7","year":2016},"citing_paper":{"arxiv_id":"2506.22722","last_updated":"2025-06-28T02:06:23Z","snapshot_observed_at":"2026-08-13T20:37:50.771603Z","submitted_at":"2025-06-28T02:06:23Z","title":"Kill Two Birds with One Stone! Trajectory enabled Unified Online Detection of Adversarial Examples and Backdoor Attacks","version":1},"reference_index":83,"source":"pdf_text","source_observed_at":"2026-08-06T22:06:43.637251Z"},"links":{"citing_paper":"/paper/2506.22722"},"observation_digest":"sha256:e65503645fc2d6c88134aaad1038856a6451600a0a3470dbb23d1cdb53d1769c","observation_id":"7efdb8e2-2d27-47b2-bd01-4e86e3475933","resolution":{"observed_at":"2026-08-06T22:06:47.141552Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1712.04248","last_updated":"2018-02-16T14:40:42Z","snapshot_observed_at":"2026-08-14T20:04:31.854470Z","submitted_at":"2017-12-12T11:36:26Z","title":"Decision-Based Adversarial Attacks: Reliable Attacks Against Black-Box Machine Learning Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1712.04248","snapshot_observed_at":"2026-08-06T22:06:43.758930Z","title":"Decision-based adversarial attacks: Reliable attacks against black-box machine learning models,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2506.22722","last_updated":"2025-06-28T02:06:23Z","snapshot_observed_at":"2026-08-13T20:37:50.771603Z","submitted_at":"2025-06-28T02:06:23Z","title":"Kill Two Birds with One Stone! Trajectory enabled Unified Online Detection of Adversarial Examples and Backdoor Attacks","version":1},"reference_index":84,"source":"pdf_text","source_observed_at":"2026-08-06T22:06:43.758930Z"},"links":{"cited_paper":"/paper/1712.04248","citing_paper":"/paper/2506.22722"},"observation_digest":"sha256:e4644592b4916b83e3a08783e5cddbbaa24772ce863324a3abc9135b45f5374d","observation_id":"f7a3dee5-a533-4b7f-a56a-aba4b72d0ff9","resolution":{"observed_at":"2026-08-06T22:06:43.758930Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:06:46.827101Z","title":"Adversarial machine learning in image classification: A survey toward the defender’s per- spective,","venue":null,"work_id":"34bc4748-df82-4ed8-a0d3-2d1273a16629","year":2021},"citing_paper":{"arxiv_id":"2506.22722","last_updated":"2025-06-28T02:06:23Z","snapshot_observed_at":"2026-08-13T20:37:50.771603Z","submitted_at":"2025-06-28T02:06:23Z","title":"Kill Two Birds with One Stone! Trajectory enabled Unified Online Detection of Adversarial Examples and Backdoor Attacks","version":1},"reference_index":85,"source":"pdf_text","source_observed_at":"2026-08-06T22:06:43.830471Z"},"links":{"citing_paper":"/paper/2506.22722"},"observation_digest":"sha256:162ae98ac32e1f547e1928fa4a6676fdd3b9d0fb77d4101e16ded9cc9ea23b3a","observation_id":"41b8b22b-3377-4ef0-ba22-5a65d096a6a3","resolution":{"observed_at":"2026-08-06T22:06:46.910653Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:06:43.952055Z","title":"Deep residual learning for image recognition,","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2506.22722","last_updated":"2025-06-28T02:06:23Z","snapshot_observed_at":"2026-08-13T20:37:50.771603Z","submitted_at":"2025-06-28T02:06:23Z","title":"Kill Two Birds with One Stone! Trajectory enabled Unified Online Detection of Adversarial Examples and Backdoor Attacks","version":1},"reference_index":86,"source":"pdf_text","source_observed_at":"2026-08-06T22:06:43.952055Z"},"links":{"citing_paper":"/paper/2506.22722"},"observation_digest":"sha256:ad9e9bf7b79d01d403297b5f6e8460a39babbd50840c4a93b695895856514321","observation_id":"c9b475f7-93cc-490b-87bc-41f570b6c560","resolution":{"observed_at":"2026-08-06T22:06:43.952055Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:06:44.047422Z","title":"Tiny imagenet visual recognition challenge,","venue":null,"work_id":null,"year":2015},"citing_paper":{"arxiv_id":"2506.22722","last_updated":"2025-06-28T02:06:23Z","snapshot_observed_at":"2026-08-13T20:37:50.771603Z","submitted_at":"2025-06-28T02:06:23Z","title":"Kill Two Birds with One Stone! Trajectory enabled Unified Online Detection of Adversarial Examples and Backdoor Attacks","version":1},"reference_index":87,"source":"pdf_text","source_observed_at":"2026-08-06T22:06:44.047422Z"},"links":{"citing_paper":"/paper/2506.22722"},"observation_digest":"sha256:552a940b3d5e36c1a7ed8823fe68dfece42f23fc6107eddef062b9b6a7583104","observation_id":"83ef3df7-0209-4026-a03b-767510a33192","resolution":{"observed_at":"2026-08-06T22:06:44.047422Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1807.03418","last_updated":"2023-11-27T18:26:32Z","snapshot_observed_at":"2026-08-14T18:53:59.994825Z","submitted_at":"2018-07-09T23:11:17Z","title":"AudioMNIST: Exploring Explainable Artificial Intelligence for Audio Analysis on a Simple Benchmark","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1807.03418","snapshot_observed_at":"2026-08-06T22:06:44.145779Z","title":"Interpreting and explaining deep neural networks for classification of audio signals,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2506.22722","last_updated":"2025-06-28T02:06:23Z","snapshot_observed_at":"2026-08-13T20:37:50.771603Z","submitted_at":"2025-06-28T02:06:23Z","title":"Kill Two Birds with One Stone! Trajectory enabled Unified Online Detection of Adversarial Examples and Backdoor Attacks","version":1},"reference_index":88,"source":"pdf_text","source_observed_at":"2026-08-06T22:06:44.145779Z"},"links":{"cited_paper":"/paper/1807.03418","citing_paper":"/paper/2506.22722"},"observation_digest":"sha256:ef0f1281ab64cf9d46aaf12f7106badd3f10b2f73d95308be9559871099c1d96","observation_id":"2e29c732-7d74-4832-b6c3-ad018d6c9ea2","resolution":{"observed_at":"2026-08-06T22:06:44.145779Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:06:46.587642Z","title":"Recursive deep models for semantic compositionality over a sentiment treebank,","venue":null,"work_id":"e7615406-3d52-483e-ab34-5d70d24d9c86","year":2013},"citing_paper":{"arxiv_id":"2506.22722","last_updated":"2025-06-28T02:06:23Z","snapshot_observed_at":"2026-08-13T20:37:50.771603Z","submitted_at":"2025-06-28T02:06:23Z","title":"Kill Two Birds with One Stone! Trajectory enabled Unified Online Detection of Adversarial Examples and Backdoor Attacks","version":1},"reference_index":89,"source":"pdf_text","source_observed_at":"2026-08-06T22:06:44.251017Z"},"links":{"citing_paper":"/paper/2506.22722"},"observation_digest":"sha256:4c05385ede677ac15a80e0425c77f5360ba6a2911b88661b7e24cfa5b187d374","observation_id":"d38c0022-ed5a-464e-834c-5bdce4a6e10d","resolution":{"observed_at":"2026-08-06T22:06:46.717729Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1907.11692","last_updated":"2019-07-26T17:48:29Z","snapshot_observed_at":"2026-07-31T22:31:37.910868Z","submitted_at":"2019-07-26T17:48:29Z","title":"RoBERTa: A Robustly Optimized BERT Pretraining Approach","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1907.11692","snapshot_observed_at":"2026-08-06T22:06:44.351097Z","title":"Roberta: A robustly optimized bert pretraining approach,","venue":null,"work_id":null,"year":1907},"citing_paper":{"arxiv_id":"2506.22722","last_updated":"2025-06-28T02:06:23Z","snapshot_observed_at":"2026-08-13T20:37:50.771603Z","submitted_at":"2025-06-28T02:06:23Z","title":"Kill Two Birds with One Stone! Trajectory enabled Unified Online Detection of Adversarial Examples and Backdoor Attacks","version":1},"reference_index":90,"source":"pdf_text","source_observed_at":"2026-08-06T22:06:44.351097Z"},"links":{"cited_paper":"/paper/1907.11692","citing_paper":"/paper/2506.22722"},"observation_digest":"sha256:6ce31b2f8cfaba719a2d9c019d7c05c84b80a4b89f53300d7a31d360c5574812","observation_id":"c4aa5016-9adc-448a-98a3-5e590ca29090","resolution":{"observed_at":"2026-08-06T22:06:44.351097Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:06:46.418642Z","title":"A comprehensive survey on pretrained foundation models: A history from bert to chatgpt,","venue":null,"work_id":"8875bc72-7e3c-4c60-9b3c-c72fd3c669eb","year":2024},"citing_paper":{"arxiv_id":"2506.22722","last_updated":"2025-06-28T02:06:23Z","snapshot_observed_at":"2026-08-13T20:37:50.771603Z","submitted_at":"2025-06-28T02:06:23Z","title":"Kill Two Birds with One Stone! Trajectory enabled Unified Online Detection of Adversarial Examples and Backdoor Attacks","version":1},"reference_index":91,"source":"pdf_text","source_observed_at":"2026-08-06T22:06:44.425535Z"},"links":{"citing_paper":"/paper/2506.22722"},"observation_digest":"sha256:59e07906fe0ea21e5fd6f1607f8d945546ad858e4c92e915d179f955cb4b1b32","observation_id":"e39b5cc0-4a9d-4a59-9338-9bab129e0f41","resolution":{"observed_at":"2026-08-06T22:06:46.495935Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2403.14608","last_updated":"2024-09-16T02:54:50Z","snapshot_observed_at":"2026-08-04T09:07:42.158421Z","submitted_at":"2024-03-21T17:55:50Z","title":"Parameter-Efficient Fine-Tuning for Large Models: A Comprehensive Survey","version":7},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.14608","snapshot_observed_at":"2026-08-06T22:06:44.505386Z","title":"Parameter-efficient fine- tuning for large models: A comprehensive survey,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.22722","last_updated":"2025-06-28T02:06:23Z","snapshot_observed_at":"2026-08-13T20:37:50.771603Z","submitted_at":"2025-06-28T02:06:23Z","title":"Kill Two Birds with One Stone! Trajectory enabled Unified Online Detection of Adversarial Examples and Backdoor Attacks","version":1},"reference_index":92,"source":"pdf_text","source_observed_at":"2026-08-06T22:06:44.505386Z"},"links":{"cited_paper":"/paper/2403.14608","citing_paper":"/paper/2506.22722"},"observation_digest":"sha256:cdc48bf9cb7c579e4c9c53de8b8e46afd05370e274248f8f9fcc7ea7711cb075","observation_id":"da345400-6487-4735-a849-9cc8aaecde13","resolution":{"observed_at":"2026-08-06T22:06:44.505386Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2106.09685","last_updated":"2021-10-16T18:40:34Z","snapshot_observed_at":"2026-08-11T08:20:29.798517Z","submitted_at":"2021-06-17T17:37:18Z","title":"LoRA: Low-Rank Adaptation of Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2106.09685","snapshot_observed_at":"2026-08-06T22:06:44.604934Z","title":"Lora: Low-rank adaptation of large language models,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2506.22722","last_updated":"2025-06-28T02:06:23Z","snapshot_observed_at":"2026-08-13T20:37:50.771603Z","submitted_at":"2025-06-28T02:06:23Z","title":"Kill Two Birds with One Stone! Trajectory enabled Unified Online Detection of Adversarial Examples and Backdoor Attacks","version":1},"reference_index":93,"source":"pdf_text","source_observed_at":"2026-08-06T22:06:44.604934Z"},"links":{"cited_paper":"/paper/2106.09685","citing_paper":"/paper/2506.22722"},"observation_digest":"sha256:ead94a70d2e43842126a1e24af543048983a8e54a4c660da73f941b1b7b124a7","observation_id":"ca82e6cb-9b70-47d4-8416-39e442e0298b","resolution":{"observed_at":"2026-08-06T22:06:44.604934Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:06:46.238740Z","title":"Generating natural language adversarial examples through probability weighted word saliency,","venue":null,"work_id":"0adc6fd3-343a-4261-b1e6-997566b71acc","year":2019},"citing_paper":{"arxiv_id":"2506.22722","last_updated":"2025-06-28T02:06:23Z","snapshot_observed_at":"2026-08-13T20:37:50.771603Z","submitted_at":"2025-06-28T02:06:23Z","title":"Kill Two Birds with One Stone! Trajectory enabled Unified Online Detection of Adversarial Examples and Backdoor Attacks","version":1},"reference_index":94,"source":"pdf_text","source_observed_at":"2026-08-06T22:06:44.701214Z"},"links":{"citing_paper":"/paper/2506.22722"},"observation_digest":"sha256:90673f1179820427c88a19cbad50a31fbe3c19c2f89420d0db166b31a2cdb311","observation_id":"44284909-3a4f-425b-8a0c-1ebb9eedc2b9","resolution":{"observed_at":"2026-08-06T22:06:46.339350Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:06:46.013859Z","title":"Textbugger: Generating adversarial text against real-world applications,","venue":null,"work_id":"f22f10b8-e3d9-43ca-ae19-cd7a4cf74a3c","year":2019},"citing_paper":{"arxiv_id":"2506.22722","last_updated":"2025-06-28T02:06:23Z","snapshot_observed_at":"2026-08-13T20:37:50.771603Z","submitted_at":"2025-06-28T02:06:23Z","title":"Kill Two Birds with One Stone! Trajectory enabled Unified Online Detection of Adversarial Examples and Backdoor Attacks","version":1},"reference_index":95,"source":"pdf_text","source_observed_at":"2026-08-06T22:06:44.816069Z"},"links":{"citing_paper":"/paper/2506.22722"},"observation_digest":"sha256:cd305230865f51782c4d2ec44e546eb370a24a429789f3e9e999348130634bb5","observation_id":"2d6d0482-bceb-4450-93e0-0aded82b5fcc","resolution":{"observed_at":"2026-08-06T22:06:46.116722Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:06:45.821823Z","title":"Apparent and real age estimation in still images with deep residual regressors on appa-real database,","venue":null,"work_id":"94e7c090-b19c-4120-ba6f-425071b8bfe7","year":2017},"citing_paper":{"arxiv_id":"2506.22722","last_updated":"2025-06-28T02:06:23Z","snapshot_observed_at":"2026-08-13T20:37:50.771603Z","submitted_at":"2025-06-28T02:06:23Z","title":"Kill Two Birds with One Stone! Trajectory enabled Unified Online Detection of Adversarial Examples and Backdoor Attacks","version":1},"reference_index":96,"source":"pdf_text","source_observed_at":"2026-08-06T22:06:44.916718Z"},"links":{"citing_paper":"/paper/2506.22722"},"observation_digest":"sha256:49b9a45f4e882dd8dfb79e351ffc37ca3ddab9a3df92a8ac4d4fb320dc559393","observation_id":"b5664576-4422-4fc7-8d1f-42f7dace659f","resolution":{"observed_at":"2026-08-06T22:06:45.918030Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:06:45.613478Z","title":"Aggregated residual transformations for deep neural networks,","venue":null,"work_id":"09bab5fe-98d3-48e4-aa86-a43648abd09e","year":2017},"citing_paper":{"arxiv_id":"2506.22722","last_updated":"2025-06-28T02:06:23Z","snapshot_observed_at":"2026-08-13T20:37:50.771603Z","submitted_at":"2025-06-28T02:06:23Z","title":"Kill Two Birds with One Stone! Trajectory enabled Unified Online Detection of Adversarial Examples and Backdoor Attacks","version":1},"reference_index":97,"source":"pdf_text","source_observed_at":"2026-08-06T22:06:45.018949Z"},"links":{"citing_paper":"/paper/2506.22722"},"observation_digest":"sha256:d57cbaaac71e4c8fa2c410260b821705a69b68d42fcf0bb48d232d409a3f5451","observation_id":"8d159858-70b1-4c89-9a29-d6fd1a15ae2b","resolution":{"observed_at":"2026-08-06T22:06:45.714176Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:06:45.412306Z","title":"Rab: Provable robustness against backdoor attacks,","venue":null,"work_id":"08e29bd1-5463-4f02-bc57-c17e63376086","year":2023},"citing_paper":{"arxiv_id":"2506.22722","last_updated":"2025-06-28T02:06:23Z","snapshot_observed_at":"2026-08-13T20:37:50.771603Z","submitted_at":"2025-06-28T02:06:23Z","title":"Kill Two Birds with One Stone! Trajectory enabled Unified Online Detection of Adversarial Examples and Backdoor Attacks","version":1},"reference_index":98,"source":"pdf_text","source_observed_at":"2026-08-06T22:06:45.115088Z"},"links":{"citing_paper":"/paper/2506.22722"},"observation_digest":"sha256:ace0eb18d1d573a72c75d364876e83ff7be9fe6a8cf27e1efe4cd43fcaaa5529","observation_id":"98b3b073-a80f-4f6a-bf99-9c8e840b9a49","resolution":{"observed_at":"2026-08-06T22:06:45.505081Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2506.22722","last_updated":"2025-06-28T02:06:23Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-13T20:37:50.771603Z","submitted_at":"2025-06-28T02:06:23Z","title":"Kill Two Birds with One Stone! Trajectory enabled Unified Online Detection of Adversarial Examples and Backdoor Attacks"},"reference_resolution":{"displayed":98,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":41,"verified_exact":0,"verified_fuzzy":57},"total_outbound_references":98},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"thesis":"As of 15 August 2026, this Paper Citation Record lists 98 of 98 outbound references and 0 inbound Pith citation observations for arXiv:2506.22722."}