{"as_of":"2026-08-07T18:00:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:98f98a5f2f1e1508bcf0166a034dd39d9ce253b0d553c813d2b170af2d46e768","coverage":[{"denominator":107,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":100,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-06T21:50:30.639123Z","state":"measured"},{"denominator":100,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":100,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-07T06:34:17.273281+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2506.23296/citation-record","integrity":"/paper/2506.23296/integrity","json":"/paper/2506.23296/citation-record.json","paper":"/paper/2506.23296"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:20.988268Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-07T12:05:10.352398Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:20.988268Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:e1587f349113dd840be85fb1049c43f0770fb11abdb2c4c5b857351b9244789e","observation_id":"2b38b47d-dd62-4f3f-adcb-e23e48c9fe9c","resolution":{"observed_at":"2026-08-06T21:50:20.988268Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:21.073555Z","title":null,"venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-07T12:05:10.352398Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:21.073555Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:a8eb48acad5770274f8428722740de1a3fdf8e5519efa80813c72b55a062c143","observation_id":"f1be1799-acee-44e3-bf34-e919c1eaa0f2","resolution":{"observed_at":"2026-08-06T21:50:21.073555Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.1007/s10462-021-10125-w","metadata_source":"doi_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:31.874374Z","title":null,"venue":null,"work_id":"99ffe6f9-7ea0-4a78-a4aa-8f826697d332","year":2022},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-07T12:05:10.352398Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:21.188556Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:8525b83d6d1ddbfa73345f6969400bf2e4a3207052a27ee0ae52a51f64ead91e","observation_id":"a3ab3e34-ab4a-46e2-95e2-41b5b258695a","resolution":{"observed_at":"2026-08-06T21:50:31.966672Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2015.07182","doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:34.990978Z","title":"Mancini, Angelo Spognardi, Antonio Villani, Domenico Vitali, and Giovanni Felici","venue":null,"work_id":"6eeb447d-5c23-4204-915d-ec832cf79f0e","year":2015},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-07T12:05:10.352398Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:21.299304Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:ed480804f8954e80be4ea03ed4d3aa25f1bff121d112e7438577d516941f5158","observation_id":"83928b71-ac57-481c-801e-c329c73cee83","resolution":{"observed_at":"2026-08-06T21:50:35.083027Z","resolver_source":"raw_fallback","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2305.03350","last_updated":"2023-05-05T08:11:00Z","snapshot_observed_at":"2026-07-06T15:23:37.282247Z","submitted_at":"2023-05-05T08:11:00Z","title":"Reconstructing Training Data from Multiclass Neural Networks","version":1},"cited_work":{"arxiv_id":"2305.03350","doi":null,"metadata_source":"pith","pith_arxiv_id":"2305.03350","snapshot_observed_at":"2026-08-06T21:50:34.734837Z","title":"Reconstructing Training Data from Multiclass Neural Networks","venue":"cs.LG","work_id":"1e058c37-fca0-43bb-abc0-3cfdec428373","year":2023},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-07T12:05:10.352398Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:21.601566Z"},"links":{"cited_paper":"/paper/2305.03350","citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:ac0daf6bd6aa8e3f28d3cf7780b5dc249f2b5a2084d65199e0784a48d96a5d47","observation_id":"50a39457-de37-4b31-a45c-a7fc9595641a","resolution":{"observed_at":"2026-08-06T21:50:34.801042Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:21.716396Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-07T12:05:10.352398Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:21.716396Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:93ba20bace3703d1e9bb43f4db1d909aee7edcc8cd6f6b10ead7278fcd69e99c","observation_id":"67712711-d93e-4f1d-8bd7-ed4ee64cdc26","resolution":{"observed_at":"2026-08-06T21:50:21.716396Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:21.840644Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-07T12:05:10.352398Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:21.840644Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:a6279beceebb272319399c5ddf113cff820d05c5db9b60d860095c153c6df5dd","observation_id":"5e78e5a4-f0f9-4fcb-b79d-16d8dbab4b41","resolution":{"observed_at":"2026-08-06T21:50:21.840644Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:21.944155Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-07T12:05:10.352398Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:21.944155Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:18c21ed13c229a77ef107d5f42f0c5cb70934f534ddeb873cf8fe33035c0f9be","observation_id":"3cdfb5e1-b14d-46f5-a9bf-6fdd3152a95c","resolution":{"observed_at":"2026-08-06T21:50:21.944155Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:22.073958Z","title":null,"venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-07T12:05:10.352398Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:22.073958Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:282c6b54089d30e0556a9609c1dfe1a5d39db2c89dd22c06f46c0ff0281fd856","observation_id":"e4a8db94-a0bf-4d47-a344-8d90823ac3ba","resolution":{"observed_at":"2026-08-06T21:50:22.073958Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:22.159850Z","title":"Choquette-Choo, Matthew Jagielski, Irena Gao, Pang Wei W Koh, Daphne Ippolito, Florian Tramer, and Ludwig Schmidt","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-07T12:05:10.352398Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:22.159850Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:b58b51c2a0509308cbd58cdf26778a1abd632fbf45ba1c5ceac78056510b7603","observation_id":"003e5efd-9537-4380-9a58-d57d6da71e0e","resolution":{"observed_at":"2026-08-06T21:50:22.159850Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:22.259245Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-07T12:05:10.352398Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:22.259245Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:19ba13e23978200595dab4961fee80d66faf050294a6d25415aaaf567c47faa8","observation_id":"3d893a9f-df9c-4c97-81a0-c4145fddc7ad","resolution":{"observed_at":"2026-08-06T21:50:22.259245Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:22.426887Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-07T12:05:10.352398Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:22.426887Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:381c76f2424b7ffaa38b88e3c8a84f903bdb737ab3d68e89f31cba480671fc1d","observation_id":"1d37d4a2-d885-43a3-9220-479abb4761c6","resolution":{"observed_at":"2026-08-06T21:50:22.426887Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:22.550382Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-07T12:05:10.352398Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:22.550382Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:36b5f402fb5e254f284b16623f0be97b403c30dcab59225e0f6f5ee093c54969","observation_id":"1f9fec0e-9696-456f-b07b-618e9d2245d5","resolution":{"observed_at":"2026-08-06T21:50:22.550382Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.08419","last_updated":"2024-07-18T18:24:57Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-10-12T15:38:28Z","title":"Jailbreaking Black Box Large Language Models in Twenty Queries","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.08419","snapshot_observed_at":"2026-08-06T21:50:22.646283Z","title":"Pappas, and Eric Wong","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-07T12:05:10.352398Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:22.646283Z"},"links":{"cited_paper":"/paper/2310.08419","citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:425f3e479e4137643250292ad006717ca1448e4da12e430161827a92b4ae2aab","observation_id":"424f6e11-f56d-4d67-9b4b-b00b937b29ce","resolution":{"observed_at":"2026-08-06T21:50:22.646283Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.1145/3638531","metadata_source":"doi_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:31.714232Z","title":"Ali Babar","venue":null,"work_id":"a8049557-8007-4324-90da-9763c9a65619","year":2024},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-07T12:05:10.352398Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:22.735538Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:e30b75d1f36ba44a342ca0dd7e4a6f8bc95ad688050e4e79204207d60c0c600a","observation_id":"c99d5963-4875-4ae5-be2e-5df37985e73d","resolution":{"observed_at":"2026-08-06T21:50:31.772235Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:22.839615Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-07T12:05:10.352398Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:22.839615Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:90b500b064f39f410f45a9e08cfa6a8850c7b4d68c1b59ff0119758c35dd21b1","observation_id":"fda68c38-06a8-44ef-9e18-e65af1772f11","resolution":{"observed_at":"2026-08-06T21:50:22.839615Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2203.08147","last_updated":"2025-04-18T12:28:58Z","snapshot_observed_at":"2026-07-06T12:48:16.632982Z","submitted_at":"2022-03-14T17:18:10Z","title":"Energy-Latency Attacks via Sponge Poisoning","version":5},"cited_work":{"arxiv_id":"2203.08147","doi":null,"metadata_source":"pith","pith_arxiv_id":"2203.08147","snapshot_observed_at":"2026-08-06T21:50:34.501590Z","title":"Energy-Latency Attacks via Sponge Poisoning","venue":"cs.CR","work_id":"7863539c-f9d6-425d-a36f-4b14eaa79db5","year":2022},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-07T12:05:10.352398Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:22.937021Z"},"links":{"cited_paper":"/paper/2203.08147","citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:d23291a9bf8d005e82000491831cf209892232917db10ba6e9b97b717ca336ba","observation_id":"3bf6cb87-28bb-4030-bc83-8d77b80aadee","resolution":{"observed_at":"2026-08-06T21:50:34.554963Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:23.063903Z","title":"Berriel, Claudine Badue, Alberto F","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-07T12:05:10.352398Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:23.063903Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:e9fbc3282a283a9f3b772b5e44a415b044c018f02dd1f36620619659dba56064","observation_id":"8ab122fa-2288-4267-b366-24ad1b1b9c45","resolution":{"observed_at":"2026-08-06T21:50:23.063903Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:23.222198Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-07T12:05:10.352398Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:23.222198Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:5815ee740dbb4e9c8923432b8114b9dfda66c20eaa136d1b34276c812d70034d","observation_id":"4fefe178-ac92-4352-aa1f-02cf5368adcb","resolution":{"observed_at":"2026-08-06T21:50:23.222198Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:23.292430Z","title":"Hadi Amini, and Yanzhao Wu","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-07T12:05:10.352398Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:23.292430Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:3b293d2c2757706eb0181b0366abdac08b35057245978ce753807d935aeb7a20","observation_id":"a432533b-0389-4eea-a2d6-0a6b934f8582","resolution":{"observed_at":"2026-08-06T21:50:23.292430Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:23.411176Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-07T12:05:10.352398Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:23.411176Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:c4edebff1d122b26d4a505d658f72161507dedc65495d73cd9208e02810a3910","observation_id":"ac79abb5-3f31-4efe-9579-c7c3765cbd5c","resolution":{"observed_at":"2026-08-06T21:50:23.411176Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:23.529931Z","title":null,"venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-07T12:05:10.352398Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:23.529931Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:af84b63f9bef7ca24fe7cbbee03c31cd0c9d5d7174d93e18f75c80cff5828c16","observation_id":"b0b52106-6536-4ac7-a053-de6032fb5a4e","resolution":{"observed_at":"2026-08-06T21:50:23.529931Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:23.612283Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-07T12:05:10.352398Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:23.612283Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:631ac7b2c008ffe27bce507460e2dbf0474facce6d8be0f80daa3aa0b7975a31","observation_id":"c02ac1c0-145a-4584-8458-4c94e94e1934","resolution":{"observed_at":"2026-08-06T21:50:23.612283Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:23.681904Z","title":null,"venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-07T12:05:10.352398Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:23.681904Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:c22e6e19de3b39684a3b0a26bc9b50558bd92c802ebaa105e3c19753fbe2f45c","observation_id":"4a215271-7d51-4811-bd30-dca16aac678b","resolution":{"observed_at":"2026-08-06T21:50:23.681904Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:23.718464Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-07T12:05:10.352398Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:23.718464Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:73e64bfe1865f9b4b4506209e315dbe8c203ca519cd5a9e85bb25008bcaa72d3","observation_id":"fe249f1e-66b3-46ac-b055-f9160b953dff","resolution":{"observed_at":"2026-08-06T21:50:23.718464Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:23.811217Z","title":null,"venue":null,"work_id":null,"year":2015},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-07T12:05:10.352398Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:23.811217Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:336bba17c65e0fffd23a88711d57a6162ace7035a0da1cd7a29eaccd6175d037","observation_id":"e7e30aab-fc8d-4183-aed1-759ebb9a6ea4","resolution":{"observed_at":"2026-08-06T21:50:23.811217Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:23.930755Z","title":"Gunter, and Nikita Borisov","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-07T12:05:10.352398Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:23.930755Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:d3bf10b06022a08f21929da57399f85f0bef339723485a3b449db526429903d7","observation_id":"06c0c4aa-c99b-4216-9322-6d7c62acf30a","resolution":{"observed_at":"2026-08-06T21:50:23.930755Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1412.6572","last_updated":"2015-03-20T20:19:16Z","snapshot_observed_at":"2026-07-06T04:04:16.777653Z","submitted_at":"2014-12-20T01:17:12Z","title":"Explaining and Harnessing Adversarial Examples","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1412.6572","snapshot_observed_at":"2026-08-06T21:50:24.040838Z","title":"Goodfellow, Jonathon Shlens, and Christian Szegedy","venue":null,"work_id":null,"year":2015},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-07T12:05:10.352398Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:24.040838Z"},"links":{"cited_paper":"/paper/1412.6572","citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:506021044bfedf2593448c085b3fe046583e846d996bad83b09717da34f316d2","observation_id":"51153b1d-52fb-44be-892a-875ab09493b6","resolution":{"observed_at":"2026-08-06T21:50:24.040838Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:24.108440Z","title":null,"venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-07T12:05:10.352398Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:24.108440Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:8cb08f97d39f4c67f159a585d6922ec0cb540ec01c4dc47a025355e20f7662b2","observation_id":"3737ee73-2ba6-4611-9366-baf74ddbab81","resolution":{"observed_at":"2026-08-06T21:50:24.108440Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:24.189844Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-07T12:05:10.352398Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:24.189844Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:39ed0ef7ff20f5a56c4b98d0d517c0f6a20bd64c4a44a61e1def0c2d4ef886f4","observation_id":"e51fff14-9021-46d6-b3cc-3d0b7c9f1f2c","resolution":{"observed_at":"2026-08-06T21:50:24.189844Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:24.261915Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-07T12:05:10.352398Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:24.261915Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:ed3620d11c0d8d4bc8941da80be0016b08a6c5170fc709cf26ea5b759feb1c0d","observation_id":"b77b2213-50e1-4d6f-9946-0f66ed7e67cc","resolution":{"observed_at":"2026-08-06T21:50:24.261915Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"file/9069273","doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:34.070592Z","title":null,"venue":null,"work_id":"9f8fa973-a957-4743-a992-c57b69706a1d","year":2022},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-07T12:05:10.352398Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:24.380832Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:df615c3dff12066258dc82db513d1542acc0bf5b63a112a8d0c678875c0fd34e","observation_id":"9b40be03-a142-4a35-bc18-b95101a00fea","resolution":{"observed_at":"2026-08-06T21:50:34.112191Z","resolver_source":"raw_fallback","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:24.501579Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-07T12:05:10.352398Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:24.501579Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:7da83b05a1adb219d37b74ce17c9ad9110307751f03d5d733c93178ca86587e9","observation_id":"3a61a07a-0f63-4b05-9b16-cc49701cb69b","resolution":{"observed_at":"2026-08-06T21:50:24.501579Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:24.594005Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-07T12:05:10.352398Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:24.594005Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:bef4409229414dafe6361ff097ac780fffaaf8382e6e0435b36e75d82a1c66ef","observation_id":"ea033ab5-46cf-47b9-89c4-9a8fd2cadd63","resolution":{"observed_at":"2026-08-06T21:50:24.594005Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:24.687846Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-07T12:05:10.352398Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:24.687846Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:33d3d77477faf22c255fa3ef0aa3fbe8a29c7eb675aad68b2b35696a2b484b31","observation_id":"8c40ce3f-2564-474a-be71-6894444fbb9d","resolution":{"observed_at":"2026-08-06T21:50:24.687846Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:24.807049Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-07T12:05:10.352398Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:24.807049Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:2e6bb37e353ea2c79174878d97ef4da0751266b22b41211fa8054067961c9d21","observation_id":"532aa503-ebb5-4fef-b714-a9025fcc1ed5","resolution":{"observed_at":"2026-08-06T21:50:24.807049Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:24.901340Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-07T12:05:10.352398Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:24.901340Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:df5317aebeed695733b2f5ba1772469c981abd93c7d9cd2f09368270f2d8e4e1","observation_id":"e7c5cf82-6729-4df4-8d9d-fd67ec401788","resolution":{"observed_at":"2026-08-06T21:50:24.901340Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:25.052983Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-07T12:05:10.352398Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:25.052983Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:6d231701594233038e04eb01f422ec0521aa831fb39449e7b27e36c74ce4ca2c","observation_id":"650a378c-e545-4706-bb1d-22e2ef054f18","resolution":{"observed_at":"2026-08-06T21:50:25.052983Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:25.121350Z","title":null,"venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-07T12:05:10.352398Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:25.121350Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:59e641ce0993306c326bb834af1f0ec648784ed4dbecc3b5e7a3e4d3f317c42e","observation_id":"566576a0-48c8-49a5-8f0c-c5b7c3a650bb","resolution":{"observed_at":"2026-08-06T21:50:25.121350Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:25.217196Z","title":null,"venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-07T12:05:10.352398Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:25.217196Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:aef05c192e6ce8aa0d8bf33dde7edb82d1db0c7c422266295a0ba6cc411b7418","observation_id":"11fade70-b816-4b2d-8ad2-f6b52b9336c6","resolution":{"observed_at":"2026-08-06T21:50:25.217196Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2301.07474","last_updated":"2023-01-19T02:43:05Z","snapshot_observed_at":"2026-08-04T23:08:26.910062Z","submitted_at":"2023-01-18T12:32:51Z","title":"Threats, Vulnerabilities, and Controls of Machine Learning Based Systems: A Survey and Taxonomy","version":2},"cited_work":{"arxiv_id":"2301.07474","doi":null,"metadata_source":"pith","pith_arxiv_id":"2301.07474","snapshot_observed_at":"2026-08-06T21:50:33.818372Z","title":"Threats, Vulnerabilities, and Controls of Machine Learning Based Systems: A Survey and Taxonomy","venue":"cs.CR","work_id":"619583a1-3caa-4b50-95ef-a96d0df5ca72","year":2023},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-07T12:05:10.352398Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:25.299426Z"},"links":{"cited_paper":"/paper/2301.07474","citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:17d1198ce780a804f07ff4a44f0739811d1ec4653597c6f9e1ab8bd6fa7aabb8","observation_id":"1c16d194-8743-4947-95e7-93c88f9d093c","resolution":{"observed_at":"2026-08-06T21:50:33.851554Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.1155/2021/4907754","metadata_source":"doi_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:31.504005Z","title":null,"venue":null,"work_id":"d14ae359-8ca1-49bc-9352-a3a670779450","year":2021},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-07T12:05:10.352398Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:25.393827Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:ae1ceee8bed9f94a1fb6055c2125c879ba3779dee1674efe3647049b744b05c4","observation_id":"587e6a35-7274-4e7d-b82e-cbe0da093658","resolution":{"observed_at":"2026-08-06T21:50:31.583565Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:25.505303Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-07T12:05:10.352398Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:25.505303Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:ab7b0c46de0b091a2b3f23e2e641b21694e4bce75bc844f6fd79262d66fc18f0","observation_id":"0e26f8a6-4bfe-4656-8860-1d0bc26b3dd7","resolution":{"observed_at":"2026-08-06T21:50:25.505303Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:25.591286Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-07T12:05:10.352398Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:25.591286Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:3046b5fa05c9b055b51e44027d0f9da5cc17f297cbebef8d01b557645d292b8f","observation_id":"a42f4f4e-6f22-4820-a443-be27743d3cee","resolution":{"observed_at":"2026-08-06T21:50:25.591286Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:25.825923Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-07T12:05:10.352398Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:25.825923Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:755c25195848df93fa1485021daba3b0b06b54669863643fd9f285a799966bee","observation_id":"7e77f442-1b27-4f9d-81b1-fd8ec1c3a6d3","resolution":{"observed_at":"2026-08-06T21:50:25.825923Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:25.945814Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-07T12:05:10.352398Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:25.945814Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:24cbd190e460c6005d2d8e19158d06218c0f68394d08502ff328a753a98992c9","observation_id":"617bf4db-dfe6-451c-8217-c6591df8d616","resolution":{"observed_at":"2026-08-06T21:50:25.945814Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2306.05499","last_updated":"2025-12-29T02:25:27Z","snapshot_observed_at":"2026-07-06T15:40:27.639368Z","submitted_at":"2023-06-08T18:43:11Z","title":"Prompt Injection attack against LLM-integrated Applications","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2306.05499","snapshot_observed_at":"2026-08-06T21:50:26.038139Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-07T12:05:10.352398Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:26.038139Z"},"links":{"cited_paper":"/paper/2306.05499","citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:de19cbdde3bc6a19a21caa4ef0f15b2bd56b8fc99e15cc57a5a809ab1cde3aff","observation_id":"957d2a41-837a-4075-9b19-a7b276233cfb","resolution":{"observed_at":"2026-08-06T21:50:26.038139Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:26.155456Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-07T12:05:10.352398Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:26.155456Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:17c74d1dee4b02b2085cf08c1f2efecf5f896da7bdb7a04f2c7663ca59e61eac","observation_id":"dd98af69-5183-4497-a10f-0a718e3fd3c2","resolution":{"observed_at":"2026-08-06T21:50:26.155456Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1802.04889","last_updated":"2018-02-13T23:05:05Z","snapshot_observed_at":"2026-07-06T06:23:16.798440Z","submitted_at":"2018-02-13T23:05:05Z","title":"Understanding Membership Inferences on Well-Generalized Learning Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1802.04889","snapshot_observed_at":"2026-08-06T21:50:26.251144Z","title":"Gunter, and Kai Chen","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-07T12:05:10.352398Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:26.251144Z"},"links":{"cited_paper":"/paper/1802.04889","citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:06d1628e05f13ce48c4b44ba29bd05c4b201a1b0bf3abb9a2b6bcf717ab33b65","observation_id":"22d614df-7206-45f1-b224-4c2d92881d95","resolution":{"observed_at":"2026-08-06T21:50:26.251144Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:26.342631Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-07T12:05:10.352398Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:26.342631Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:c378a1d469f05fe4ec16c6fe16c88f657bf982b591ee50adcda9ac6c30e93d90","observation_id":"43ee58c1-55d4-4160-bd86-43ca84517afa","resolution":{"observed_at":"2026-08-06T21:50:26.342631Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2019.23415","doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:33.486832Z","title":null,"venue":null,"work_id":"c8bf1cb5-0e62-4ac7-b388-62f006587821","year":2019},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-07T12:05:10.352398Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:26.440855Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:0ec6cd6ea18a1fc52046827340033e973ec3fdd179cb72bcb3fcf6c427060020","observation_id":"b9504942-a50a-4f92-bfe4-0c3c2d10962b","resolution":{"observed_at":"2026-08-06T21:50:33.579984Z","resolver_source":"raw_fallback","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:26.520084Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-07T12:05:10.352398Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:26.520084Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:c7e77c35e0e81a3c17f604635fafa133418b5472c14cf2df0f3f99817fa83f17","observation_id":"96aa9fb0-8cf8-4cfb-bd21-5184315a0112","resolution":{"observed_at":"2026-08-06T21:50:26.520084Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2312.02119","last_updated":"2024-10-31T15:57:42Z","snapshot_observed_at":"2026-07-06T16:56:46.051958Z","submitted_at":"2023-12-04T18:49:23Z","title":"Tree of Attacks: Jailbreaking Black-Box LLMs Automatically","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.02119","snapshot_observed_at":"2026-08-06T21:50:26.604358Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-07T12:05:10.352398Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:26.604358Z"},"links":{"cited_paper":"/paper/2312.02119","citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:f667eabb0879b40bacb7c5acc06226672b1580ae79e6934ef56a613720a70569","observation_id":"e3ee3bc5-a349-4304-b988-48a3398a16cd","resolution":{"observed_at":"2026-08-06T21:50:26.604358Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:26.692643Z","title":null,"venue":null,"work_id":null,"year":2013},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-07T12:05:10.352398Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:26.692643Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:0c6374f919d1aa5a9dc38d9badf224d00033fb70eae79c2c4f54b85664c63556","observation_id":"f93f49fe-5a16-4d5e-aeca-90bd70ff60d7","resolution":{"observed_at":"2026-08-06T21:50:26.692643Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:26.743564Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-07T12:05:10.352398Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:26.743564Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:33dfc5bebadd53944a54ec71a2e8455248ac005098294f6ecb71138a42bd9005","observation_id":"8add8e05-bafc-48cb-aa2b-a517a0da9e18","resolution":{"observed_at":"2026-08-06T21:50:26.743564Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2007.09339","last_updated":"2020-07-18T06:21:35Z","snapshot_observed_at":"2026-08-06T02:11:03.649894Z","submitted_at":"2020-07-18T06:21:35Z","title":"ML Privacy Meter: Aiding Regulatory Compliance by Quantifying the Privacy Risks of Machine Learning","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2007.09339","snapshot_observed_at":"2026-08-06T21:50:26.839728Z","title":null,"venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-07T12:05:10.352398Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":58,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:26.839728Z"},"links":{"cited_paper":"/paper/2007.09339","citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:7a535cec2d757a2f3abe32ab251fdb9dd7df3c793960fdc9a7aaa5626bfb000b","observation_id":"44722f7a-4e19-4a2a-83f5-9ccb9c440d8e","resolution":{"observed_at":"2026-08-06T21:50:26.839728Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:26.901705Z","title":null,"venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-07T12:05:10.352398Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":59,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:26.901705Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:3ad481f519dd5882b84c96e447636f96d4ae3384df2fa3219d9a0c80d5488cd4","observation_id":"0a70863b-d38c-41a7-95bd-21d97bcca3ca","resolution":{"observed_at":"2026-08-06T21:50:26.901705Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:26.961268Z","title":"Khasawneh, and Houman Homayoun","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-07T12:05:10.352398Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":60,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:26.961268Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:53f9441072bf8398bb4a9a75788733eca15cc6596c3463911ab50ee81b7e3c36","observation_id":"be920142-7765-4c8b-ac4f-4a10607ad0cd","resolution":{"observed_at":"2026-08-06T21:50:26.961268Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1807.01069","last_updated":"2019-11-15T15:05:57Z","snapshot_observed_at":"2026-07-06T06:48:06.001588Z","submitted_at":"2018-07-03T10:25:26Z","title":"Adversarial Robustness Toolbox v1.0.0","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1807.01069","snapshot_observed_at":"2026-08-06T21:50:27.050580Z","title":"Molloy, and Ben Edwards","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-07T12:05:10.352398Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":61,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:27.050580Z"},"links":{"cited_paper":"/paper/1807.01069","citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:44e72795f153f3b0c4aa8369df7ef52052504c55048a5a48c3a819a0b1f85b9b","observation_id":"c42ebb42-a6d2-4e01-8f55-c2fd298bbd5c","resolution":{"observed_at":"2026-08-06T21:50:27.050580Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:27.120521Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-07T12:05:10.352398Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":62,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:27.120521Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:25df520b28eee535469c0cde3113786b9936892b473d61fd2f645632d96fc229","observation_id":"80215c62-3053-4885-8547-e2c2545ece0f","resolution":{"observed_at":"2026-08-06T21:50:27.120521Z","resolver_source":null,"status":"malformed_identifier"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:27.186373Z","title":"Department of Commerce","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-07T12:05:10.352398Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":63,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:27.186373Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:efa8cc1dc307ba94a391ac03bf721030a4de3f9014f30195cf222a3e0cf4b32c","observation_id":"12f1a340-2718-4fe3-baab-b95bda3a8c92","resolution":{"observed_at":"2026-08-06T21:50:27.186373Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:27.268324Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-07T12:05:10.352398Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":64,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:27.268324Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:c191a1a68a318a88d4ef12cdb33117550825325d36c59a62c905482f7b31a1b3","observation_id":"d286f262-56ab-49f1-b49c-1176580044dc","resolution":{"observed_at":"2026-08-06T21:50:27.268324Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:27.342600Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-07T12:05:10.352398Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":65,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:27.342600Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:fbab67a508f0143699bf9c16b644f181a392f6b9896c2b7c683431d67ae46a5b","observation_id":"ab906321-b451-4ae1-aab4-2408d2a1f00f","resolution":{"observed_at":"2026-08-06T21:50:27.342600Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:37.695815Z","title":null,"venue":null,"work_id":"39cfaa77-d166-48f1-9e12-0b9035e91726","year":2023},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-07T12:05:10.352398Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":66,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:27.400827Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:9768568689c4025aec664d9d0b8196428e906a8f26030d3c22fcadb8656c1620","observation_id":"c1f4d3c2-95ac-4bf9-812b-87783d405cac","resolution":{"observed_at":"2026-08-06T21:50:37.784683Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.1007/978-3-030-28954-6_7","metadata_source":"doi_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:31.321974Z","title":null,"venue":null,"work_id":"d24b56fd-25c1-422a-943f-33846a58d03f","year":2019},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-07T12:05:10.352398Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":67,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:27.451392Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:e9f5259655f97f05bf3d6ba10299329e07186a894a34887a16f97fc9bb5fcd5c","observation_id":"c93a0811-56a1-4c33-abb9-ca0017e2e93e","resolution":{"observed_at":"2026-08-06T21:50:31.419820Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:27.535790Z","title":null,"venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-07T12:05:10.352398Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":68,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:27.535790Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:36fd7a75769759e9f7c979982712a3f83900c8ea6488e80c769b3c1c8c22d18e","observation_id":"786fba58-42e4-4d1f-9d87-d6cc851a5812","resolution":{"observed_at":"2026-08-06T21:50:27.535790Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2102.04661","last_updated":"2021-02-09T06:06:13Z","snapshot_observed_at":"2026-08-06T16:38:00.577324Z","submitted_at":"2021-02-09T06:06:13Z","title":"Security and Privacy for Artificial Intelligence: Opportunities and Challenges","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2102.04661","snapshot_observed_at":"2026-08-06T21:50:27.608111Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-07T12:05:10.352398Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":69,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:27.608111Z"},"links":{"cited_paper":"/paper/2102.04661","citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:fd6ac26c0ef892a3fec9d05af8425febc7510ef63801fd3cf6bb9bf1328d7465","observation_id":"a0f5cfdd-9be7-4f0b-9bb0-af5f760ca23b","resolution":{"observed_at":"2026-08-06T21:50:27.608111Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1610.00768","last_updated":"2018-06-27T21:06:06Z","snapshot_observed_at":"2026-07-06T05:13:12.777844Z","submitted_at":"2016-10-03T22:04:07Z","title":"Technical Report on the CleverHans v2.1.0 Adversarial Examples Library","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1610.00768","snapshot_observed_at":"2026-08-06T21:50:27.662686Z","title":null,"venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-07T12:05:10.352398Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":70,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:27.662686Z"},"links":{"cited_paper":"/paper/1610.00768","citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:b121664f3c1509447852a5cd7ebcd2db99c7025937f08bf1b72b1878be0af99a","observation_id":"80267212-9e6f-40c0-ac89-69b6fbade147","resolution":{"observed_at":"2026-08-06T21:50:27.662686Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:33.070453Z","title":"Berkay Celik, and Ananthram Swami","venue":null,"work_id":"19b694b7-6c1c-4881-a3ae-06f4f37f0d48","year":2017},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-07T12:05:10.352398Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":71,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:27.724515Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:63d4566ffe661273110c6649478a735887d6661a8e0de832eb73488c7c3c3f81","observation_id":"8249cacc-88ab-4242-b39e-8e04afceac18","resolution":{"observed_at":"2026-08-06T21:50:33.139900Z","resolver_source":"arxiv_id_nonexistent","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:27.794299Z","title":"Coimbra, Daniel Castro, Paulo Carreira, and Nuno Santos","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-07T12:05:10.352398Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":72,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:27.794299Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:2a55b797c2632af57091283790bae84e410279d6e1eb5f23551fee3580318cc8","observation_id":"6db4fa16-a76c-4e96-b671-a09452274c0c","resolution":{"observed_at":"2026-08-06T21:50:27.794299Z","resolver_source":null,"status":"malformed_identifier"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:27.872868Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-07T12:05:10.352398Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":73,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:27.872868Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:3a7407b59d76fd4b0d74452d0a7f668c566d443adb95b1811138a5f369d4ed9e","observation_id":"7f1535bb-5dbb-4342-b6b8-6f03c109dba0","resolution":{"observed_at":"2026-08-06T21:50:27.872868Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:27.967251Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-07T12:05:10.352398Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":74,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:27.967251Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:30f1bb7b4172be206113d72e858cd03d8e7cbcfd3af51a34580a4cc05b066047","observation_id":"0a342eee-667f-461c-801f-0c68f21ef9f2","resolution":{"observed_at":"2026-08-06T21:50:27.967251Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:37.486020Z","title":null,"venue":null,"work_id":"49151a17-812d-4bc1-8bf0-7d71abb3dd42","year":2023},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-07T12:05:10.352398Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":75,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:28.073922Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:e378f60c7de3623a3d26520b85aee73462ad1acd91d18c2100748f45174695ae","observation_id":"bce60972-b576-4a76-a11e-723a80cc697c","resolution":{"observed_at":"2026-08-06T21:50:37.603280Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:37.344398Z","title":null,"venue":null,"work_id":"bb461f8e-4a9e-4752-b054-9121335f4df7","year":2019},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-07T12:05:10.352398Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":76,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:28.153871Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:86a0034715c2ef17adfe8539c470aeb6bca2c377c8d0dfa92477fa4d5316769d","observation_id":"4cdea68b-a5fc-4d7d-9479-86869516993b","resolution":{"observed_at":"2026-08-06T21:50:37.407954Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2310.10844","last_updated":"2023-10-16T21:37:24Z","snapshot_observed_at":"2026-07-06T16:34:11.453458Z","submitted_at":"2023-10-16T21:37:24Z","title":"Survey of Vulnerabilities in Large Language Models Revealed by Adversarial Attacks","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.10844","snapshot_observed_at":"2026-08-06T21:50:28.218630Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-07T12:05:10.352398Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":77,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:28.218630Z"},"links":{"cited_paper":"/paper/2310.10844","citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:8cf5a83f21456562e19c4f817b6ac310893ad0e11246fbd7937f2fe63910b6bc","observation_id":"6834f2c5-27b5-456d-8141-d43d9c8f53e1","resolution":{"observed_at":"2026-08-06T21:50:28.218630Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:28.334929Z","title":"Do Anything Now","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-07T12:05:10.352398Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":78,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:28.334929Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:bd1126fe4f68034f879b2d12eeb345797b3f2fa32e739d252d0147c27921fd3d","observation_id":"a4744993-03d3-4179-a8c3-02ee53fb9d88","resolution":{"observed_at":"2026-08-06T21:50:28.334929Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:37.108369Z","title":null,"venue":null,"work_id":"fc3434ba-a148-45d6-8156-e663bd45474a","year":2024},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-07T12:05:10.352398Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":79,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:28.425222Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:3712724f0a7ad5d75c67349ce84c064ab395660effcf222252814d64281bf892","observation_id":"1f765c60-5b1d-473e-a2d5-ab7ea2ce58f3","resolution":{"observed_at":"2026-08-06T21:50:37.234868Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:28.506214Z","title":null,"venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-07T12:05:10.352398Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":80,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:28.506214Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:6352fb68faa0bae6daa897bebe2457a5c8eb49c2b1af1ef88c545934b35eb1a0","observation_id":"580971cb-c8be-4861-9d28-d45010514ee5","resolution":{"observed_at":"2026-08-06T21:50:28.506214Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:28.599057Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-07T12:05:10.352398Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":81,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:28.599057Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:aec21d82f4728e82d275b86e48d1d9a88d9dd187506ab2ad052cf48f4325ee6c","observation_id":"ce20aad1-1f1b-40e0-859a-8aaae198965d","resolution":{"observed_at":"2026-08-06T21:50:28.599057Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:28.672916Z","title":null,"venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-07T12:05:10.352398Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":82,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:28.672916Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:e00b7e52aaf41341c26e2db54a731b92cebfd86b3c919afca633f02441a63866","observation_id":"677b5824-d822-4320-8262-c513fe2ab5e8","resolution":{"observed_at":"2026-08-06T21:50:28.672916Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:28.759806Z","title":null,"venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-07T12:05:10.352398Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":83,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:28.759806Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:e9ffcefb91e0b00d7d89bfb6d3b05564e4bd925e3ddad506442eafc38844c13f","observation_id":"434a7453-98e0-4d3e-ac6a-cbed45e78b42","resolution":{"observed_at":"2026-08-06T21:50:28.759806Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1905.11742","last_updated":"2020-02-08T23:45:05Z","snapshot_observed_at":"2026-08-05T15:46:22.307756Z","submitted_at":"2019-05-28T11:16:02Z","title":"Overlearning Reveals Sensitive Attributes","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1905.11742","snapshot_observed_at":"2026-08-06T21:50:28.898466Z","title":null,"venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-07T12:05:10.352398Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":84,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:28.898466Z"},"links":{"cited_paper":"/paper/1905.11742","citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:e39fe4917498bff0131d8c1879cb00cb42d341143aa1332368655a3dc926c33a","observation_id":"bb4afa71-3f1b-4554-9ad8-c1648f3c91a0","resolution":{"observed_at":"2026-08-06T21:50:28.898466Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2021.31309","doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:32.531881Z","title":null,"venue":null,"work_id":"1e88a4ff-6692-4e91-8bf7-8b25e859bfed","year":2023},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-07T12:05:10.352398Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":85,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:28.979682Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:b1e66117e4552260a5cf8ec81e4a6323ea85a7a7d88576853c8c55e593f9f9d2","observation_id":"317ba5e9-69b9-4a26-b678-f3e09393ea1b","resolution":{"observed_at":"2026-08-06T21:50:32.612918Z","resolver_source":"raw_fallback","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:36.881514Z","title":"Goodfellow, and Rob Fergus","venue":null,"work_id":"2dd21167-5e7d-4467-a469-fdb56a9e9a06","year":null},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-07T12:05:10.352398Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":86,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:29.056186Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:5f9cc3998056c338ada9f7d5b28792bc7d57d161e7ffafb228a7928bd22e2066","observation_id":"583781dd-0a4b-41ee-a5a2-b2f25d6b0d6c","resolution":{"observed_at":"2026-08-06T21:50:36.989395Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:36.631007Z","title":"Reiter, and Thomas Ristenpart","venue":null,"work_id":"3e5faf13-cc16-4b29-b944-fb27f358c9e9","year":2016},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-07T12:05:10.352398Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":87,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:29.194805Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:0f4a3534045a99cd175cb3b6cd01602acedeb5d9f5bf49b89c965c53aa1aef4d","observation_id":"f85b0670-4163-49b8-8491-d3ea8a1eb8b1","resolution":{"observed_at":"2026-08-06T21:50:36.779151Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:36.419459Z","title":null,"venue":null,"work_id":"bf2b0958-4c6f-4be5-8a9a-5e89f73695a9","year":2021},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-07T12:05:10.352398Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":88,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:29.313154Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:bb99c79154aa4aeede04e38ae14f30f8203a07d369e07d95ccc1fcfe7cf74233","observation_id":"75ea9718-a563-4c9d-9026-e7989acfb059","resolution":{"observed_at":"2026-08-06T21:50:36.537093Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:29.408021Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-07T12:05:10.352398Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":89,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:29.408021Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:f3ba0140d952d929060360bff7768eb931ad8ae970ac9a52f3b143565c42f257","observation_id":"9d9219a3-5798-4977-9692-bfe419ebb007","resolution":{"observed_at":"2026-08-06T21:50:29.408021Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:29.488953Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-07T12:05:10.352398Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":90,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:29.488953Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:5b53388c865eeda22008162f93a080cb7c9e805f6b49a0cfedf48eaa523dafb2","observation_id":"12880b80-1a3d-4f41-8530-985b2f6bbd95","resolution":{"observed_at":"2026-08-06T21:50:29.488953Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.18653/v1/d19-1","metadata_source":"doi_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:31.102589Z","title":null,"venue":null,"work_id":"26d87c85-57b4-4d94-bed4-5f6f9213a7ed","year":2019},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-07T12:05:10.352398Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":91,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:29.596213Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:a89e7a922cf092112078ac61e474d4cb6bfb70164d7942f1399060f238c8ba85","observation_id":"82ac439d-25fa-4515-af69-78aac1428211","resolution":{"observed_at":"2026-08-06T21:50:31.183628Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:29.685623Z","title":null,"venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-07T12:05:10.352398Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":92,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:29.685623Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:4309c86b0782f82acf6e852882df2e79a5a5dfcf518fcd12af51a2a4976e1469","observation_id":"f6267c2b-7e7a-4958-a2d4-289ff395bb3c","resolution":{"observed_at":"2026-08-06T21:50:29.685623Z","resolver_source":null,"status":"malformed_identifier"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:36.113916Z","title":null,"venue":null,"work_id":"2d91548b-35fd-4cc1-b7ff-f0d637f2e289","year":2023},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-07T12:05:10.352398Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":93,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:29.743803Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:0635339f0e26143d64fd1332a3c4768688797a05c2997ebceca61465c49897e1","observation_id":"7349fd77-9483-44c8-8671-5443cc971cff","resolution":{"observed_at":"2026-08-06T21:50:36.268829Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:35.846535Z","title":null,"venue":null,"work_id":"4efb9592-d1ff-484d-be6a-54a6112227cc","year":2024},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-07T12:05:10.352398Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":94,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:29.809419Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:cf9afb37743e21599f2244f05b737879b6ae7d4c14f3c52ba7f1a59aa603b435","observation_id":"e3a5929f-487c-4a3b-9244-8a740282b91e","resolution":{"observed_at":"2026-08-06T21:50:35.968252Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:29.879926Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-07T12:05:10.352398Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":95,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:29.879926Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:5bacde9759186cd6c516fda9e66803a5334aaa86cc0a2a034f4954e7edbf272e","observation_id":"2c57ae27-f76b-4ad0-9b42-481583f0b2a2","resolution":{"observed_at":"2026-08-06T21:50:29.879926Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:29.965749Z","title":null,"venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-07T12:05:10.352398Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":96,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:29.965749Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:4475d1dea7648328c88c1836c228dfa148d02e758f6166e4394931c72c3429fc","observation_id":"d1af0fb0-8d12-4e33-9d03-078c434d20d1","resolution":{"observed_at":"2026-08-06T21:50:29.965749Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:30.093777Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-07T12:05:10.352398Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":97,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:30.093777Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:4647aa2c4799f5519ace027a8685c91afddf2ac8f13b8c103012e95b6cc8bb4f","observation_id":"5c0e46c6-9d82-43ce-914f-7a40722f7170","resolution":{"observed_at":"2026-08-06T21:50:30.093777Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:30.170717Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-07T12:05:10.352398Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":98,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:30.170717Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:a95953336a38402a16216d5ff7df7e6e441c07102fc51381f26b70e31a358798","observation_id":"1fc9153d-0760-46d6-9af4-867076972e4d","resolution":{"observed_at":"2026-08-06T21:50:30.170717Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:30.289164Z","title":null,"venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-07T12:05:10.352398Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":99,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:30.289164Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:030cc21a4c22ad398bed1d2de1af5a437cfeff4d56829d143cbda07e7bd254dd","observation_id":"6cd673d6-e606-4aa0-9e2e-3a0d24a0f6c5","resolution":{"observed_at":"2026-08-06T21:50:30.289164Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:50:30.424239Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-07T12:05:10.352398Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":100,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:30.424239Z"},"links":{"citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:1dac8f6bcaeea5cf4ac619b812f0e5b8b087f873bc934ce5d1b8e9ddde3d106a","observation_id":"dee12ea4-8595-48f6-a993-843e0f0b5b21","resolution":{"observed_at":"2026-08-06T21:50:30.424239Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2209.10505","last_updated":"2022-09-21T17:05:12Z","snapshot_observed_at":"2026-07-06T13:54:49.290065Z","submitted_at":"2022-09-21T17:05:12Z","title":"Text Revealer: Private Text Reconstruction via Model Inversion Attacks against Transformers","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2209.10505","snapshot_observed_at":"2026-08-06T21:50:30.552161Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-07T12:05:10.352398Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":101,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:30.552161Z"},"links":{"cited_paper":"/paper/2209.10505","citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:dc0be2f3e25c8038ca85f5e80a0153982a4b586a08eab4e2aafea8f735842e24","observation_id":"5224b3fa-d0ae-4942-ac78-7cb0d497e35b","resolution":{"observed_at":"2026-08-06T21:50:30.552161Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2307.06865","last_updated":"2024-08-07T22:05:01Z","snapshot_observed_at":"2026-07-31T03:57:50.965539Z","submitted_at":"2023-07-13T16:15:08Z","title":"Effective Prompt Extraction from Language Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.06865","snapshot_observed_at":"2026-08-06T21:50:30.639123Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","snapshot_observed_at":"2026-08-07T12:05:10.352398Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts","version":1},"reference_index":102,"source":"pdf_text","source_observed_at":"2026-08-06T21:50:30.639123Z"},"links":{"cited_paper":"/paper/2307.06865","citing_paper":"/paper/2506.23296"},"observation_digest":"sha256:6fc4ade18bf7eb89518c05990d9023c5a6b62115491befded7d287eb67cfa9eb","observation_id":"0c396fbc-a2e3-4865-937a-7b29a1f4bee4","resolution":{"observed_at":"2026-08-06T21:50:30.639123Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2506.23296","last_updated":"2025-06-29T15:32:03Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-07T12:05:10.352398Z","submitted_at":"2025-06-29T15:32:03Z","title":"Securing AI Systems: A Guide to Known Attacks and Impacts"},"reference_resolution":{"displayed":100,"state_counts":{"malformed_identifier":3,"metadata_mismatch":2,"parse_uncertain":0,"unresolved":82,"verified_exact":11,"verified_fuzzy":2},"total_outbound_references":107},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"thesis":"As of 7 August 2026, this Paper Citation Record lists 100 of 107 outbound references and 0 inbound Pith citation observations for arXiv:2506.23296."}