{"as_of":"2026-08-07T22:06:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:0b443e17b01d8f8253dcb07f3cdc63009425f87c0f591a1ad57fc6f3386227b7","coverage":[{"denominator":51,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":51,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-06T18:17:56.251385Z","state":"measured"},{"denominator":52,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":52,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-07T06:34:17.273281+00:00","state":"measured"},{"denominator":1,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":1,"source":"paper_references, paper_reference_links","source_observed_at":"2026-07-12T03:11:45.903819Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2507.08623","last_updated":"2025-07-11T14:25:36Z","snapshot_observed_at":"2026-08-06T18:11:31.622235Z","submitted_at":"2025-07-11T14:25:36Z","title":"Entangled Threats: A Unified Kill Chain Model for Quantum Machine Learning Security","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2507.08623","snapshot_observed_at":"2026-07-12T03:11:45.903819Z","title":"Entangled Threats: A Unified Kill Chain Model for Quantum Machine Learning Security","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.03337","last_updated":"2026-07-03T13:55:07Z","snapshot_observed_at":"2026-08-04T16:03:18.714384Z","submitted_at":"2026-07-03T13:55:07Z","title":"An End-to-End Multi-Stage Kill-Chain Attack on Quantum Neural Networks: Demonstration on Trapped-Ion Hardware","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-07-12T03:11:45.903819Z"},"links":{"cited_paper":"/paper/2507.08623","citing_paper":"/paper/2607.03337"},"observation_digest":"sha256:eb11791bd82e8f99c00bc25ee7d4581cafa441e8146c21e15929e27e07c4751b","observation_id":"a04bb184-0570-4c28-a421-2752d9aefd3d","resolution":{"observed_at":"2026-07-12T03:11:45.903819Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2507.08623/citation-record","integrity":"/paper/2507.08623/integrity","json":"/paper/2507.08623/citation-record.json","paper":"/paper/2507.08623"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T18:18:05.843153Z","title":"A Survey and Tutorial on Security and Resilience of Quantum Computing,","venue":null,"work_id":"551df990-3fbb-4800-a8f9-2ed843d65321","year":2021},"citing_paper":{"arxiv_id":"2507.08623","last_updated":"2025-07-11T14:25:36Z","snapshot_observed_at":"2026-08-06T18:11:31.622235Z","submitted_at":"2025-07-11T14:25:36Z","title":"Entangled Threats: A Unified Kill Chain Model for Quantum Machine Learning Security","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-06T18:17:52.232899Z"},"links":{"citing_paper":"/paper/2507.08623"},"observation_digest":"sha256:4f9f10f45485ee07c2dcb1dcd24ab4c7a66a0a16d67c76ac56e71ab064e2adab","observation_id":"915f4b0d-f8b3-4ea9-a0aa-9c2ff561fc9b","resolution":{"observed_at":"2026-08-06T18:18:05.928993Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T18:18:05.672335Z","title":"Impact of Noise on the Resilience and the Security of Quantum Computing,","venue":null,"work_id":"1c7f6145-583c-4ded-aee8-798c0649b3ee","year":2021},"citing_paper":{"arxiv_id":"2507.08623","last_updated":"2025-07-11T14:25:36Z","snapshot_observed_at":"2026-08-06T18:11:31.622235Z","submitted_at":"2025-07-11T14:25:36Z","title":"Entangled Threats: A Unified Kill Chain Model for Quantum Machine Learning Security","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-06T18:17:52.346257Z"},"links":{"citing_paper":"/paper/2507.08623"},"observation_digest":"sha256:c1c7ff2a0bcdc18ecaa95325a0c8c0a12f7a62da3acbcfed607a5f88a26ab712","observation_id":"27c10d61-06ff-4765-9d14-65db98aae953","resolution":{"observed_at":"2026-08-06T18:18:05.768829Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T18:18:05.480061Z","title":"Franco et al., Predominant Aspects on Security for Quantum Machine Learning: Literature Review , Version Number: 3, 2024","venue":null,"work_id":"9365e2e7-bad2-4eb4-9d9a-c940135c94b4","year":2024},"citing_paper":{"arxiv_id":"2507.08623","last_updated":"2025-07-11T14:25:36Z","snapshot_observed_at":"2026-08-06T18:11:31.622235Z","submitted_at":"2025-07-11T14:25:36Z","title":"Entangled Threats: A Unified Kill Chain Model for Quantum Machine Learning Security","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-06T18:17:52.426025Z"},"links":{"citing_paper":"/paper/2507.08623"},"observation_digest":"sha256:37d9bc96d692c86cfaa2a00e5f564107c7bee671330a47d51ac89c72543edce4","observation_id":"569bcd48-c26f-4972-95cc-eaf9e45dba47","resolution":{"observed_at":"2026-08-06T18:18:05.579498Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T18:18:05.306456Z","title":"Security Aspects of Quantum Machine Learning,","venue":null,"work_id":"43c3118e-a5b3-42f3-b550-fbf0bd7de1a1","year":2025},"citing_paper":{"arxiv_id":"2507.08623","last_updated":"2025-07-11T14:25:36Z","snapshot_observed_at":"2026-08-06T18:11:31.622235Z","submitted_at":"2025-07-11T14:25:36Z","title":"Entangled Threats: A Unified Kill Chain Model for Quantum Machine Learning Security","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-06T18:17:52.523116Z"},"links":{"citing_paper":"/paper/2507.08623"},"observation_digest":"sha256:83d5466ed2521f913db2d70dccfa999c7423949894c93b6fbbfca51e78a2ba35","observation_id":"ee08d7fa-efa1-4b6a-9e6d-6fb33afdae58","resolution":{"observed_at":"2026-08-06T18:18:05.388561Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2401.15869","last_updated":"2025-02-24T16:09:42Z","snapshot_observed_at":"2026-08-06T10:07:03.079348Z","submitted_at":"2024-01-29T03:56:21Z","title":"Quantum Circuit Reconstruction from Power Side-Channel Attacks on Quantum Computer Controllers","version":2},"cited_work":{"arxiv_id":"2401.15869","doi":null,"metadata_source":"pith","pith_arxiv_id":"2401.15869","snapshot_observed_at":"2026-08-06T18:17:57.402932Z","title":"Quantum Circuit Reconstruction from Power Side-Channel Attacks on Quantum Computer Controllers","venue":"cs.CR","work_id":"7fc1ab0b-f8c6-4161-8fff-1f76a9e8fbf5","year":2024},"citing_paper":{"arxiv_id":"2507.08623","last_updated":"2025-07-11T14:25:36Z","snapshot_observed_at":"2026-08-06T18:11:31.622235Z","submitted_at":"2025-07-11T14:25:36Z","title":"Entangled Threats: A Unified Kill Chain Model for Quantum Machine Learning Security","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-06T18:17:52.624514Z"},"links":{"cited_paper":"/paper/2401.15869","citing_paper":"/paper/2507.08623"},"observation_digest":"sha256:945f46bd5b87d4a02c9609fc5f5b2efe894a17b4dd401f13821833b14d7d1965","observation_id":"16d9ef6e-11c6-4ace-a4bc-635c81740ed9","resolution":{"observed_at":"2026-08-06T18:17:57.543097Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T18:18:05.136323Z","title":"Exploration of Power Side-Channel Vulnerabilities in Quantum Computer Con- trollers,","venue":null,"work_id":"8a9e9a99-0b22-4b57-9b96-84316d74a7c2","year":2023},"citing_paper":{"arxiv_id":"2507.08623","last_updated":"2025-07-11T14:25:36Z","snapshot_observed_at":"2026-08-06T18:11:31.622235Z","submitted_at":"2025-07-11T14:25:36Z","title":"Entangled Threats: A Unified Kill Chain Model for Quantum Machine Learning Security","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-06T18:17:52.700285Z"},"links":{"citing_paper":"/paper/2507.08623"},"observation_digest":"sha256:fdc0e7213a363529b2b61744318b505c6ec4095e68d02d3da2f8d489215d2d29","observation_id":"a8079c25-11f1-4de9-9063-d0a7f862aa2e","resolution":{"observed_at":"2026-08-06T18:18:05.185233Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2401.01521","last_updated":"2024-01-03T03:14:46Z","snapshot_observed_at":"2026-08-05T17:49:56.947555Z","submitted_at":"2024-01-03T03:14:46Z","title":"Quantum Leak: Timing Side-Channel Attacks on Cloud-Based Quantum Services","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2401.01521","snapshot_observed_at":"2026-08-06T18:17:52.795054Z","title":"Lu et al","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.08623","last_updated":"2025-07-11T14:25:36Z","snapshot_observed_at":"2026-08-06T18:11:31.622235Z","submitted_at":"2025-07-11T14:25:36Z","title":"Entangled Threats: A Unified Kill Chain Model for Quantum Machine Learning Security","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-06T18:17:52.795054Z"},"links":{"cited_paper":"/paper/2401.01521","citing_paper":"/paper/2507.08623"},"observation_digest":"sha256:5ac87a981247c6e56f202eacb22643d94db9ac4cbc928510478919884285a551","observation_id":"364f30fb-6c66-4a12-bb5a-7175a84711e0","resolution":{"observed_at":"2026-08-06T18:17:52.795054Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2502.10115","last_updated":"2025-02-14T12:25:08Z","snapshot_observed_at":"2026-08-07T19:17:44.071101Z","submitted_at":"2025-02-14T12:25:08Z","title":"SWAP Attack: Stealthy Side-Channel Attack on Multi-Tenant Quantum Cloud System","version":1},"cited_work":{"arxiv_id":"2502.10115","doi":null,"metadata_source":"pith","pith_arxiv_id":"2502.10115","snapshot_observed_at":"2026-08-06T18:17:57.105944Z","title":"SWAP Attack: Stealthy Side-Channel Attack on Multi-Tenant Quantum Cloud System","venue":"quant-ph","work_id":"8defa3bb-b197-4fa1-87ae-b2108cadce26","year":2025},"citing_paper":{"arxiv_id":"2507.08623","last_updated":"2025-07-11T14:25:36Z","snapshot_observed_at":"2026-08-06T18:11:31.622235Z","submitted_at":"2025-07-11T14:25:36Z","title":"Entangled Threats: A Unified Kill Chain Model for Quantum Machine Learning Security","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-06T18:17:52.896843Z"},"links":{"cited_paper":"/paper/2502.10115","citing_paper":"/paper/2507.08623"},"observation_digest":"sha256:db8994ceaf0af44fb7cbced3cce305fff35f013ec29d434ba7ffa3b29bf5d758","observation_id":"33d5ee87-5cd9-4776-b637-74d11c660ff4","resolution":{"observed_at":"2026-08-06T18:17:57.257771Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2412.10507","last_updated":"2024-12-13T19:00:21Z","snapshot_observed_at":"2026-07-06T20:06:48.183096Z","submitted_at":"2024-12-13T19:00:21Z","title":"Crosstalk-induced Side Channel Threats in Multi-Tenant NISQ Computers","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2412.10507","snapshot_observed_at":"2026-08-06T18:17:52.993364Z","title":"Choudhury et al","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.08623","last_updated":"2025-07-11T14:25:36Z","snapshot_observed_at":"2026-08-06T18:11:31.622235Z","submitted_at":"2025-07-11T14:25:36Z","title":"Entangled Threats: A Unified Kill Chain Model for Quantum Machine Learning Security","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-06T18:17:52.993364Z"},"links":{"cited_paper":"/paper/2412.10507","citing_paper":"/paper/2507.08623"},"observation_digest":"sha256:ba839cf6f17db977cc38d0b681b93bfe636850c1428ef5bb1b288ee0bd8d16f0","observation_id":"baee71b0-561e-4214-ac49-e48d405d9a8c","resolution":{"observed_at":"2026-08-06T18:17:52.993364Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T18:18:04.943188Z","title":"A Survey on Machine Learning Against Hardware Trojan Attacks: Recent Advances and Challenges,","venue":null,"work_id":"487bb0fa-b671-4655-adbb-025ec236530b","year":2020},"citing_paper":{"arxiv_id":"2507.08623","last_updated":"2025-07-11T14:25:36Z","snapshot_observed_at":"2026-08-06T18:11:31.622235Z","submitted_at":"2025-07-11T14:25:36Z","title":"Entangled Threats: A Unified Kill Chain Model for Quantum Machine Learning Security","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-06T18:17:53.080541Z"},"links":{"citing_paper":"/paper/2507.08623"},"observation_digest":"sha256:9fdcbe17636fc2e6ab06191080a18744e1fa5607aa3fae9c2cf8ce4164e5421d","observation_id":"02e9512a-5301-4286-8cf9-e2c497bf23b6","resolution":{"observed_at":"2026-08-06T18:18:05.042793Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T18:18:04.788851Z","title":"Trojaning Attack on Neural Networks,","venue":null,"work_id":"a5c598b6-1f77-4fee-b0d3-a01167d68190","year":null},"citing_paper":{"arxiv_id":"2507.08623","last_updated":"2025-07-11T14:25:36Z","snapshot_observed_at":"2026-08-06T18:11:31.622235Z","submitted_at":"2025-07-11T14:25:36Z","title":"Entangled Threats: A Unified Kill Chain Model for Quantum Machine Learning Security","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-06T18:17:53.156243Z"},"links":{"citing_paper":"/paper/2507.08623"},"observation_digest":"sha256:ebd69ad096dea04d295e8099a4873e3306e9c156a749964f689b5745eacb429d","observation_id":"634d865a-eef0-44bb-9b22-e37a81243630","resolution":{"observed_at":"2026-08-06T18:18:04.855457Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T18:18:04.645212Z","title":"Is Feature Selection Secure against Training Data Poisoning?","venue":null,"work_id":"f1df9dc6-3744-4209-9a60-1fbc8b29ad73","year":2015},"citing_paper":{"arxiv_id":"2507.08623","last_updated":"2025-07-11T14:25:36Z","snapshot_observed_at":"2026-08-06T18:11:31.622235Z","submitted_at":"2025-07-11T14:25:36Z","title":"Entangled Threats: A Unified Kill Chain Model for Quantum Machine Learning Security","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-06T18:17:53.241302Z"},"links":{"citing_paper":"/paper/2507.08623"},"observation_digest":"sha256:ae00617d5a008acdadc2b8c3de5ab39d9dbc3047d01f5265a34f326e6ccad14d","observation_id":"506bf67c-9aa1-42fe-8f45-941b506f3bd7","resolution":{"observed_at":"2026-08-06T18:18:04.714378Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T18:18:04.427775Z","title":"Adversarial label flips attack on support vector machines,","venue":null,"work_id":"b078dc12-ac2d-47c8-82a2-133ad07d37d9","year":2012},"citing_paper":{"arxiv_id":"2507.08623","last_updated":"2025-07-11T14:25:36Z","snapshot_observed_at":"2026-08-06T18:11:31.622235Z","submitted_at":"2025-07-11T14:25:36Z","title":"Entangled Threats: A Unified Kill Chain Model for Quantum Machine Learning Security","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-06T18:17:53.325945Z"},"links":{"citing_paper":"/paper/2507.08623"},"observation_digest":"sha256:d8c86ff45a12dd0d44de1444a461c4a1fc954beb8f163d4ffd281c010ec9778c","observation_id":"63d06768-46c1-4040-a820-4d0cb6b352e2","resolution":{"observed_at":"2026-08-06T18:18:04.524982Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T18:18:04.181014Z","title":"Vulnerability of quantum classifi- cation to adversarial perturbations,","venue":null,"work_id":"0920ba5d-6530-46d4-8919-3cc7265a5675","year":2020},"citing_paper":{"arxiv_id":"2507.08623","last_updated":"2025-07-11T14:25:36Z","snapshot_observed_at":"2026-08-06T18:11:31.622235Z","submitted_at":"2025-07-11T14:25:36Z","title":"Entangled Threats: A Unified Kill Chain Model for Quantum Machine Learning Security","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-06T18:17:53.405453Z"},"links":{"citing_paper":"/paper/2507.08623"},"observation_digest":"sha256:7b62c9e07de037979e6bd0a016241faf8a197a76e6465196f5b7c86e9a528c73","observation_id":"2ea09b8e-3afb-421b-ae03-76b70dba5029","resolution":{"observed_at":"2026-08-06T18:18:04.310288Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1412.6572","last_updated":"2015-03-20T20:19:16Z","snapshot_observed_at":"2026-07-06T04:04:16.777653Z","submitted_at":"2014-12-20T01:17:12Z","title":"Explaining and Harnessing Adversarial Examples","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1412.6572","snapshot_observed_at":"2026-08-06T18:17:53.496968Z","title":null,"venue":null,"work_id":null,"year":2015},"citing_paper":{"arxiv_id":"2507.08623","last_updated":"2025-07-11T14:25:36Z","snapshot_observed_at":"2026-08-06T18:11:31.622235Z","submitted_at":"2025-07-11T14:25:36Z","title":"Entangled Threats: A Unified Kill Chain Model for Quantum Machine Learning Security","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-06T18:17:53.496968Z"},"links":{"cited_paper":"/paper/1412.6572","citing_paper":"/paper/2507.08623"},"observation_digest":"sha256:9bb5154474994f59473a27a6e390b3bd0c489dd13c7bd9dd2c463e6f70145ad6","observation_id":"9f160aba-3e2c-46ce-9b62-8672d20e7239","resolution":{"observed_at":"2026-08-06T18:17:53.496968Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1706.06083","last_updated":"2019-09-04T18:53:10Z","snapshot_observed_at":"2026-08-07T14:27:46.872660Z","submitted_at":"2017-06-19T17:53:11Z","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1706.06083","snapshot_observed_at":"2026-08-06T18:17:53.556032Z","title":"Madry et al","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2507.08623","last_updated":"2025-07-11T14:25:36Z","snapshot_observed_at":"2026-08-06T18:11:31.622235Z","submitted_at":"2025-07-11T14:25:36Z","title":"Entangled Threats: A Unified Kill Chain Model for Quantum Machine Learning Security","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-06T18:17:53.556032Z"},"links":{"cited_paper":"/paper/1706.06083","citing_paper":"/paper/2507.08623"},"observation_digest":"sha256:49afa5bd813041c7cbd25e1c0e23263717981cad95602ac4895a75d1d65846a0","observation_id":"6083be7e-f060-4d7a-96c1-9cb8e18c8699","resolution":{"observed_at":"2026-08-06T18:17:53.556032Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T18:18:03.850721Z","title":"Quantum adver- sarial machine learning,","venue":null,"work_id":"c778483d-c96a-4abd-9fbf-b2b87c61bd7a","year":2020},"citing_paper":{"arxiv_id":"2507.08623","last_updated":"2025-07-11T14:25:36Z","snapshot_observed_at":"2026-08-06T18:11:31.622235Z","submitted_at":"2025-07-11T14:25:36Z","title":"Entangled Threats: A Unified Kill Chain Model for Quantum Machine Learning Security","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-06T18:17:53.626274Z"},"links":{"citing_paper":"/paper/2507.08623"},"observation_digest":"sha256:850510aa7207abc85e92f5fbee2b1b41856cec8c9caa531ebbda24eefe5cee8d","observation_id":"c7561229-195f-49f2-a5b2-6f85af021159","resolution":{"observed_at":"2026-08-06T18:18:04.009710Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T18:18:03.655835Z","title":"Experimental quantum adversarial learning with programmable superconducting qubits,","venue":null,"work_id":"58e2062b-e394-4f08-8341-3e0ee56a0c37","year":2022},"citing_paper":{"arxiv_id":"2507.08623","last_updated":"2025-07-11T14:25:36Z","snapshot_observed_at":"2026-08-06T18:11:31.622235Z","submitted_at":"2025-07-11T14:25:36Z","title":"Entangled Threats: A Unified Kill Chain Model for Quantum Machine Learning Security","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-06T18:17:53.724467Z"},"links":{"citing_paper":"/paper/2507.08623"},"observation_digest":"sha256:0c48b96a598cec9c93b95120a899b710d7ac63b201324ace0d2abefe396f33e2","observation_id":"803f3da0-c340-4e07-991e-b506cc351f0e","resolution":{"observed_at":"2026-08-06T18:18:03.737839Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T18:18:03.479762Z","title":"Benchmarking adversarially robust quantum machine learning at scale,","venue":null,"work_id":"3fd54d5c-7680-4158-8e4d-11e098bc39af","year":2023},"citing_paper":{"arxiv_id":"2507.08623","last_updated":"2025-07-11T14:25:36Z","snapshot_observed_at":"2026-08-06T18:11:31.622235Z","submitted_at":"2025-07-11T14:25:36Z","title":"Entangled Threats: A Unified Kill Chain Model for Quantum Machine Learning Security","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-06T18:17:53.801024Z"},"links":{"citing_paper":"/paper/2507.08623"},"observation_digest":"sha256:eceb01fc127409774759ed5476e89133c66ac8c32cad5ad3fc89116dedea5e17","observation_id":"917b50a4-f754-481b-a793-242d30dd3753","resolution":{"observed_at":"2026-08-06T18:18:03.571969Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T18:18:03.300434Z","title":"Wendlinger, K","venue":null,"work_id":"fd5a8915-8c58-4745-9c53-17de749ced4d","year":2024},"citing_paper":{"arxiv_id":"2507.08623","last_updated":"2025-07-11T14:25:36Z","snapshot_observed_at":"2026-08-06T18:11:31.622235Z","submitted_at":"2025-07-11T14:25:36Z","title":"Entangled Threats: A Unified Kill Chain Model for Quantum Machine Learning Security","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-06T18:17:53.884014Z"},"links":{"citing_paper":"/paper/2507.08623"},"observation_digest":"sha256:0e6046be0950474e64a76540cba7a25fd6f3253dc29cc114e5f2401c1dbfde03","observation_id":"626f3d23-0552-438d-aebe-7ff27657a842","resolution":{"observed_at":"2026-08-06T18:18:03.372541Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T18:18:03.086099Z","title":"Quantum noise protects quantum classifiers against adversaries,","venue":null,"work_id":"f98b0e77-c096-4160-8687-01add0aeb319","year":2021},"citing_paper":{"arxiv_id":"2507.08623","last_updated":"2025-07-11T14:25:36Z","snapshot_observed_at":"2026-08-06T18:11:31.622235Z","submitted_at":"2025-07-11T14:25:36Z","title":"Entangled Threats: A Unified Kill Chain Model for Quantum Machine Learning Security","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-06T18:17:53.960880Z"},"links":{"citing_paper":"/paper/2507.08623"},"observation_digest":"sha256:85cc7e38c54c23ffd154a0dbdbc83003d55ddbb444cc26272d7ccb8834e01468","observation_id":"fdf510ed-8ecf-4225-be76-3fe4d7cd21ff","resolution":{"observed_at":"2026-08-06T18:18:03.187556Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T18:18:02.917624Z","title":"Drastic Circuit Depth Reductions with Preserved Adversarial Robustness by Approximate Encoding for Quantum Machine Learning,","venue":null,"work_id":"7aaaf0f8-5cc2-417e-8109-f3bc09943a7b","year":2024},"citing_paper":{"arxiv_id":"2507.08623","last_updated":"2025-07-11T14:25:36Z","snapshot_observed_at":"2026-08-06T18:11:31.622235Z","submitted_at":"2025-07-11T14:25:36Z","title":"Entangled Threats: A Unified Kill Chain Model for Quantum Machine Learning Security","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-06T18:17:54.044446Z"},"links":{"citing_paper":"/paper/2507.08623"},"observation_digest":"sha256:5c5e23bd1d501b7379c88ef21a2b506e98ecc4ba7d69b63ffbd6dea8f01632fc","observation_id":"78100cd7-81c7-4b92-946d-67e9103ea670","resolution":{"observed_at":"2026-08-06T18:18:02.977282Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T18:18:02.784998Z","title":"Enhancing quantum adversarial robust- ness by randomized encodings,","venue":null,"work_id":"9ea4c0e2-c35e-49af-98c3-3d49daec167a","year":2024},"citing_paper":{"arxiv_id":"2507.08623","last_updated":"2025-07-11T14:25:36Z","snapshot_observed_at":"2026-08-06T18:11:31.622235Z","submitted_at":"2025-07-11T14:25:36Z","title":"Entangled Threats: A Unified Kill Chain Model for Quantum Machine Learning Security","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-06T18:17:54.105223Z"},"links":{"citing_paper":"/paper/2507.08623"},"observation_digest":"sha256:6df6008b14359918701ba10c735d6bf6a9ee0fbab5240cd652ec52c603baa9f0","observation_id":"ebb4cb86-88f9-4b7e-b1f6-4e3ed95b06bf","resolution":{"observed_at":"2026-08-06T18:18:02.845105Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T18:18:02.661522Z","title":"Barren plateaus in quantum neural network training landscapes,","venue":null,"work_id":"a8e87193-ee14-4c4d-9b26-88298fc8e1de","year":2018},"citing_paper":{"arxiv_id":"2507.08623","last_updated":"2025-07-11T14:25:36Z","snapshot_observed_at":"2026-08-06T18:11:31.622235Z","submitted_at":"2025-07-11T14:25:36Z","title":"Entangled Threats: A Unified Kill Chain Model for Quantum Machine Learning Security","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-06T18:17:54.199340Z"},"links":{"citing_paper":"/paper/2507.08623"},"observation_digest":"sha256:ad6eca44dfec2bf20229415db16cd61c87feeff00744830627c7033311a7cf52","observation_id":"1c988523-f2cb-4fe3-beaf-bd58398d8a14","resolution":{"observed_at":"2026-08-06T18:18:02.717782Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T18:18:02.359810Z","title":"Berberich et al","venue":null,"work_id":"a0e63ae5-3a54-40a1-abc5-c63fa9406ea2","year":2023},"citing_paper":{"arxiv_id":"2507.08623","last_updated":"2025-07-11T14:25:36Z","snapshot_observed_at":"2026-08-06T18:11:31.622235Z","submitted_at":"2025-07-11T14:25:36Z","title":"Entangled Threats: A Unified Kill Chain Model for Quantum Machine Learning Security","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-06T18:17:54.254387Z"},"links":{"citing_paper":"/paper/2507.08623"},"observation_digest":"sha256:32f5bbfb7c8cae96b1b347c80c9c69ab4025177a20f22ccc6b94cebe15997b3f","observation_id":"9fe08f1d-99d0-4c19-a30d-f1c04ccf80c9","resolution":{"observed_at":"2026-08-06T18:18:02.494556Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T18:18:02.190531Z","title":"Robustness Verification of Quantum Classifiers,","venue":null,"work_id":"6e84559a-d996-4274-b685-ad6c9ceb4063","year":2021},"citing_paper":{"arxiv_id":"2507.08623","last_updated":"2025-07-11T14:25:36Z","snapshot_observed_at":"2026-08-06T18:11:31.622235Z","submitted_at":"2025-07-11T14:25:36Z","title":"Entangled Threats: A Unified Kill Chain Model for Quantum Machine Learning Security","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-06T18:17:54.323382Z"},"links":{"citing_paper":"/paper/2507.08623"},"observation_digest":"sha256:b03ef1b651720203639745feb63e8541cb5fc3cb9cd701543f9391b8e4728e94","observation_id":"8702acb6-cced-4bc4-81d2-9ed15823cc3b","resolution":{"observed_at":"2026-08-06T18:18:02.252025Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T18:18:01.993960Z","title":"Optimal provable robustness of quantum classification via quantum hypothesis testing,","venue":null,"work_id":"0c8f7cfe-7a47-461d-a37b-4bed717f950a","year":2021},"citing_paper":{"arxiv_id":"2507.08623","last_updated":"2025-07-11T14:25:36Z","snapshot_observed_at":"2026-08-06T18:11:31.622235Z","submitted_at":"2025-07-11T14:25:36Z","title":"Entangled Threats: A Unified Kill Chain Model for Quantum Machine Learning Security","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-06T18:17:54.419230Z"},"links":{"citing_paper":"/paper/2507.08623"},"observation_digest":"sha256:fa341e41aa9ffd7f009a1ba5a49f5b6a37b01ffac561d1db1cb945786172bc12","observation_id":"6a51b0be-33ab-4496-aca0-9f5d2ccdd20f","resolution":{"observed_at":"2026-08-06T18:18:02.096067Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T18:18:01.781808Z","title":"Analysis of crosstalk in NISQ devices and security implications in multi-programming regime,","venue":null,"work_id":"c402cc13-093e-4701-b373-19902ded9d2b","year":2020},"citing_paper":{"arxiv_id":"2507.08623","last_updated":"2025-07-11T14:25:36Z","snapshot_observed_at":"2026-08-06T18:11:31.622235Z","submitted_at":"2025-07-11T14:25:36Z","title":"Entangled Threats: A Unified Kill Chain Model for Quantum Machine Learning Security","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-06T18:17:54.485617Z"},"links":{"citing_paper":"/paper/2507.08623"},"observation_digest":"sha256:26caa69c8778897eb10af7769e5af8f0bb5ea0ad69025dec75555c2b5fc7540c","observation_id":"ed9c3e4e-1392-41e4-b0b6-08f8ef3594a1","resolution":{"observed_at":"2026-08-06T18:18:01.889560Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T18:18:01.628591Z","title":"Harper et al","venue":null,"work_id":"9075cfe9-922f-4b9f-a9d8-5c6f4151b939","year":2024},"citing_paper":{"arxiv_id":"2507.08623","last_updated":"2025-07-11T14:25:36Z","snapshot_observed_at":"2026-08-06T18:11:31.622235Z","submitted_at":"2025-07-11T14:25:36Z","title":"Entangled Threats: A Unified Kill Chain Model for Quantum Machine Learning Security","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-06T18:17:54.574690Z"},"links":{"citing_paper":"/paper/2507.08623"},"observation_digest":"sha256:e12cf77beb6fe202073371fff8e7b07258e02830c4bc7579ca06dd982c9043b1","observation_id":"6d27f785-28da-44fe-b964-805628a8dca2","resolution":{"observed_at":"2026-08-06T18:18:01.711054Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2108.01054","last_updated":"2021-08-02T17:19:59Z","snapshot_observed_at":"2026-07-06T11:34:51.052944Z","submitted_at":"2021-08-02T17:19:59Z","title":"Shuttle-Exploiting Attacks and Their Defenses in Trapped-Ion Quantum Computers","version":1},"cited_work":{"arxiv_id":"2108.01054","doi":null,"metadata_source":"pith","pith_arxiv_id":"2108.01054","snapshot_observed_at":"2026-08-06T18:17:56.915987Z","title":"Shuttle-Exploiting Attacks and Their Defenses in Trapped-Ion Quantum Computers","venue":"quant-ph","work_id":"8505d4b2-ef47-4154-ad0c-81ba3e76ef33","year":2021},"citing_paper":{"arxiv_id":"2507.08623","last_updated":"2025-07-11T14:25:36Z","snapshot_observed_at":"2026-08-06T18:11:31.622235Z","submitted_at":"2025-07-11T14:25:36Z","title":"Entangled Threats: A Unified Kill Chain Model for Quantum Machine Learning Security","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-06T18:17:54.633010Z"},"links":{"cited_paper":"/paper/2108.01054","citing_paper":"/paper/2507.08623"},"observation_digest":"sha256:0abab814c8917885ba9fdd700ed7525ec3d35326311dafee945dc42145639bf7","observation_id":"8b7dc303-647a-483d-97ef-0c83e85fdf5d","resolution":{"observed_at":"2026-08-06T18:17:57.006482Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T18:18:01.414970Z","title":"Towards an Antivirus for Quantum Computers,","venue":null,"work_id":"2913b453-feaa-491c-a9b3-9ceee5b353c8","year":2022},"citing_paper":{"arxiv_id":"2507.08623","last_updated":"2025-07-11T14:25:36Z","snapshot_observed_at":"2026-08-06T18:11:31.622235Z","submitted_at":"2025-07-11T14:25:36Z","title":"Entangled Threats: A Unified Kill Chain Model for Quantum Machine Learning Security","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-06T18:17:54.701461Z"},"links":{"citing_paper":"/paper/2507.08623"},"observation_digest":"sha256:d10575d61100575e8aab65d6c675c0cde4a6dec7182fd588ccf76a10fbfdcf6f","observation_id":"5c0f2503-1e26-4bd1-bd4e-314ad2592cde","resolution":{"observed_at":"2026-08-06T18:18:01.559621Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T18:18:01.187674Z","title":"Special Session: On the Reliability of Conventional and Quantum Neural Network Hardware,","venue":null,"work_id":"591b33ad-fdda-4a71-a87f-1f62485ccc00","year":2022},"citing_paper":{"arxiv_id":"2507.08623","last_updated":"2025-07-11T14:25:36Z","snapshot_observed_at":"2026-08-06T18:11:31.622235Z","submitted_at":"2025-07-11T14:25:36Z","title":"Entangled Threats: A Unified Kill Chain Model for Quantum Machine Learning Security","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-06T18:17:54.785627Z"},"links":{"citing_paper":"/paper/2507.08623"},"observation_digest":"sha256:e60b7aac4412eeb1b1af3a90512d758d2b6fc06f90ba6ca4c06fa146a7ce3473","observation_id":"647e2af2-8fe9-455c-beb7-8b9c14ee5f93","resolution":{"observed_at":"2026-08-06T18:18:01.314364Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2104.05899","last_updated":"2021-04-13T02:15:50Z","snapshot_observed_at":"2026-07-06T10:58:57.821607Z","submitted_at":"2021-04-13T02:15:50Z","title":"Qubit Sensing: A New Attack Model for Multi-programming Quantum Computing","version":1},"cited_work":{"arxiv_id":"2104.05899","doi":null,"metadata_source":"pith","pith_arxiv_id":"2104.05899","snapshot_observed_at":"2026-08-06T18:17:56.779935Z","title":"Qubit Sensing: A New Attack Model for Multi-programming Quantum Computing","venue":"quant-ph","work_id":"6eb62e18-eeb5-4cc6-8a34-6c1c40684e6b","year":2021},"citing_paper":{"arxiv_id":"2507.08623","last_updated":"2025-07-11T14:25:36Z","snapshot_observed_at":"2026-08-06T18:11:31.622235Z","submitted_at":"2025-07-11T14:25:36Z","title":"Entangled Threats: A Unified Kill Chain Model for Quantum Machine Learning Security","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-06T18:17:54.864760Z"},"links":{"cited_paper":"/paper/2104.05899","citing_paper":"/paper/2507.08623"},"observation_digest":"sha256:e6695c78086c64a8b4ed1f42fd17e39c84f54d2c7a78510803a285fe8efd24aa","observation_id":"6fedd152-8c00-4bba-a9a3-7f63eca8e651","resolution":{"observed_at":"2026-08-06T18:17:56.842519Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T18:18:00.928613Z","title":"QTrojan: A Circuit Backdoor Against Quantum Neural Networks,","venue":null,"work_id":"95d50f84-2b36-4520-8218-343eb89381ad","year":2023},"citing_paper":{"arxiv_id":"2507.08623","last_updated":"2025-07-11T14:25:36Z","snapshot_observed_at":"2026-08-06T18:11:31.622235Z","submitted_at":"2025-07-11T14:25:36Z","title":"Entangled Threats: A Unified Kill Chain Model for Quantum Machine Learning Security","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-06T18:17:54.930279Z"},"links":{"citing_paper":"/paper/2507.08623"},"observation_digest":"sha256:098fdbcdca9d74aec7dc12d3570a5d0829e45394b9849a2eb5ed8cb1a89f6706","observation_id":"cdd1551b-45bd-425c-b055-94b3a73ba271","resolution":{"observed_at":"2026-08-06T18:18:01.083404Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T18:18:00.597034Z","title":"QDoor: Exploiting Approximate Synthe- sis for Backdoor Attacks in Quantum Neural Networks,","venue":null,"work_id":"84b958c5-6c66-4e46-b9ad-b985a75587e0","year":2023},"citing_paper":{"arxiv_id":"2507.08623","last_updated":"2025-07-11T14:25:36Z","snapshot_observed_at":"2026-08-06T18:11:31.622235Z","submitted_at":"2025-07-11T14:25:36Z","title":"Entangled Threats: A Unified Kill Chain Model for Quantum Machine Learning Security","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-06T18:17:54.995508Z"},"links":{"citing_paper":"/paper/2507.08623"},"observation_digest":"sha256:94497590d1dad02d88495e0294b16208b90c0d6ad1a4b5d405a3361895fdef29","observation_id":"1d651cd3-adb6-443e-b6b9-ec5ed7128660","resolution":{"observed_at":"2026-08-06T18:18:00.757744Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T18:18:00.216686Z","title":"Advanced Equivalence Checking for Quantum Circuits,","venue":null,"work_id":"3fd3448f-423a-4653-86cf-19f719ebe41d","year":2021},"citing_paper":{"arxiv_id":"2507.08623","last_updated":"2025-07-11T14:25:36Z","snapshot_observed_at":"2026-08-06T18:11:31.622235Z","submitted_at":"2025-07-11T14:25:36Z","title":"Entangled Threats: A Unified Kill Chain Model for Quantum Machine Learning Security","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-06T18:17:55.109087Z"},"links":{"citing_paper":"/paper/2507.08623"},"observation_digest":"sha256:0d87638468a4bc491a442a54550374d3e2cd9e09d21696ef23e0beacae985a84","observation_id":"3cdfd49a-f7f5-46f3-9af2-f900418cad83","resolution":{"observed_at":"2026-08-06T18:18:00.375343Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T18:17:59.878971Z","title":"Verifying results of the IBM Qiskit quantum circuit compilation flow,","venue":null,"work_id":"0f08c25f-853e-429f-bb30-b1bcac3f97c4","year":2020},"citing_paper":{"arxiv_id":"2507.08623","last_updated":"2025-07-11T14:25:36Z","snapshot_observed_at":"2026-08-06T18:11:31.622235Z","submitted_at":"2025-07-11T14:25:36Z","title":"Entangled Threats: A Unified Kill Chain Model for Quantum Machine Learning Security","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-06T18:17:55.174868Z"},"links":{"citing_paper":"/paper/2507.08623"},"observation_digest":"sha256:49758ef81bf2155b9d8e6baae438f312fb65278398c5f863c959f40f809597b9","observation_id":"dc731c9b-ad1d-4476-9687-72626ecbadbe","resolution":{"observed_at":"2026-08-06T18:18:00.066171Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2208.12820","last_updated":"2022-08-26T18:00:01Z","snapshot_observed_at":"2026-07-06T13:45:53.490825Z","submitted_at":"2022-08-26T18:00:01Z","title":"Equivalence Checking of Quantum Circuits with the ZX-Calculus","version":1},"cited_work":{"arxiv_id":"2208.12820","doi":null,"metadata_source":"pith","pith_arxiv_id":"2208.12820","snapshot_observed_at":"2026-08-06T18:17:56.590880Z","title":"Equivalence Checking of Quantum Circuits with the ZX-Calculus","venue":"quant-ph","work_id":"28ec327e-386d-4380-9203-d01683cb201d","year":2022},"citing_paper":{"arxiv_id":"2507.08623","last_updated":"2025-07-11T14:25:36Z","snapshot_observed_at":"2026-08-06T18:11:31.622235Z","submitted_at":"2025-07-11T14:25:36Z","title":"Entangled Threats: A Unified Kill Chain Model for Quantum Machine Learning Security","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-06T18:17:55.274883Z"},"links":{"cited_paper":"/paper/2208.12820","citing_paper":"/paper/2507.08623"},"observation_digest":"sha256:2c3be6100fc91154a627cf2e54533a3f1f4d0fa755dc943067cbe4f77efc9db9","observation_id":"55845a0b-ef08-4553-9908-4abadfbc15a3","resolution":{"observed_at":"2026-08-06T18:17:56.638984Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.10946","last_updated":"2025-05-30T14:07:35Z","snapshot_observed_at":"2026-07-06T19:33:21.541657Z","submitted_at":"2024-10-14T18:00:00Z","title":"Equivalence checking of quantum circuits via intermediary matrix product operator","version":2},"cited_work":{"arxiv_id":"2410.10946","doi":null,"metadata_source":"pith","pith_arxiv_id":"2410.10946","snapshot_observed_at":"2026-08-06T18:17:56.443999Z","title":"Equivalence checking of quantum circuits via intermediary matrix product operator","venue":"quant-ph","work_id":"b9e9f013-1cca-4f24-8bc3-67bb49094d8f","year":2024},"citing_paper":{"arxiv_id":"2507.08623","last_updated":"2025-07-11T14:25:36Z","snapshot_observed_at":"2026-08-06T18:11:31.622235Z","submitted_at":"2025-07-11T14:25:36Z","title":"Entangled Threats: A Unified Kill Chain Model for Quantum Machine Learning Security","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-06T18:17:55.333344Z"},"links":{"cited_paper":"/paper/2410.10946","citing_paper":"/paper/2507.08623"},"observation_digest":"sha256:393acd309d0bd155df4a0f53152476f16447e6d58983123d2101d604ef0fd281","observation_id":"f3b467d6-4e63-4402-9fbe-e53a1fb0f837","resolution":{"observed_at":"2026-08-06T18:17:56.526258Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T18:17:59.559337Z","title":"QuMoS: A Framework for Preserving Security of Quantum Machine Learning Model,","venue":null,"work_id":"fc570d9f-ed2b-47e0-8f80-25d3c752e22c","year":2023},"citing_paper":{"arxiv_id":"2507.08623","last_updated":"2025-07-11T14:25:36Z","snapshot_observed_at":"2026-08-06T18:11:31.622235Z","submitted_at":"2025-07-11T14:25:36Z","title":"Entangled Threats: A Unified Kill Chain Model for Quantum Machine Learning Security","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-06T18:17:55.406788Z"},"links":{"citing_paper":"/paper/2507.08623"},"observation_digest":"sha256:87d50d819d2b0d0c384ea1afaf622b0b2f837a1610a748de0f1976aeddd111c7","observation_id":"d0317e77-818e-426d-8870-83a8e9bdd172","resolution":{"observed_at":"2026-08-06T18:17:59.728703Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T18:17:59.306313Z","title":"Short Paper: A Quantum Circuit Obfuscation Methodology for Security and Privacy,","venue":null,"work_id":"4911741a-7d67-45b1-9a58-ec9841a1a29c","year":2021},"citing_paper":{"arxiv_id":"2507.08623","last_updated":"2025-07-11T14:25:36Z","snapshot_observed_at":"2026-08-06T18:11:31.622235Z","submitted_at":"2025-07-11T14:25:36Z","title":"Entangled Threats: A Unified Kill Chain Model for Quantum Machine Learning Security","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-06T18:17:55.481935Z"},"links":{"citing_paper":"/paper/2507.08623"},"observation_digest":"sha256:69384e353ffa0ece44c4f01fa889ef1ecf04e3098787fa45fcad34b5de5f1ebf","observation_id":"477c9553-d0e4-4709-a230-394dc4652b07","resolution":{"observed_at":"2026-08-06T18:17:59.429755Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T18:17:59.093085Z","title":"QuantumLeak: Stealing Quantum Neural Networks from Cloud-based NISQ Machines,","venue":null,"work_id":"993a4c9e-82f6-4bf0-ba4c-d673203193b7","year":2024},"citing_paper":{"arxiv_id":"2507.08623","last_updated":"2025-07-11T14:25:36Z","snapshot_observed_at":"2026-08-06T18:11:31.622235Z","submitted_at":"2025-07-11T14:25:36Z","title":"Entangled Threats: A Unified Kill Chain Model for Quantum Machine Learning Security","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-06T18:17:55.560924Z"},"links":{"citing_paper":"/paper/2507.08623"},"observation_digest":"sha256:9870b6a39f8732e39902d4d3965e7268391dd77b81f91a7daa9773f960d9c4a3","observation_id":"a184edd1-946d-4c48-9652-41d61b04bdb7","resolution":{"observed_at":"2026-08-06T18:17:59.211314Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T18:17:58.829544Z","title":"Model Inversion Attacks that Exploit Confidence Information and Basic Countermeasures,","venue":null,"work_id":"0e617beb-b11f-4cec-b5d4-a38aa1034266","year":2015},"citing_paper":{"arxiv_id":"2507.08623","last_updated":"2025-07-11T14:25:36Z","snapshot_observed_at":"2026-08-06T18:11:31.622235Z","submitted_at":"2025-07-11T14:25:36Z","title":"Entangled Threats: A Unified Kill Chain Model for Quantum Machine Learning Security","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-06T18:17:55.637508Z"},"links":{"citing_paper":"/paper/2507.08623"},"observation_digest":"sha256:1b13dd4eb7150bdb1faccefb050153ea2d1717426a7a6216dc9660558ce7061b","observation_id":"5c4f6ae8-c336-41aa-bebb-6c2daf5810e5","resolution":{"observed_at":"2026-08-06T18:17:58.970019Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2007.14321","last_updated":"2021-12-05T22:45:19Z","snapshot_observed_at":"2026-07-06T09:42:32.202807Z","submitted_at":"2020-07-28T15:44:31Z","title":"Label-Only Membership Inference Attacks","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2007.14321","snapshot_observed_at":"2026-08-06T18:17:55.730670Z","title":null,"venue":null,"work_id":null,"year":2007},"citing_paper":{"arxiv_id":"2507.08623","last_updated":"2025-07-11T14:25:36Z","snapshot_observed_at":"2026-08-06T18:11:31.622235Z","submitted_at":"2025-07-11T14:25:36Z","title":"Entangled Threats: A Unified Kill Chain Model for Quantum Machine Learning Security","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-06T18:17:55.730670Z"},"links":{"cited_paper":"/paper/2007.14321","citing_paper":"/paper/2507.08623"},"observation_digest":"sha256:049304f2a8cd28ab77764bb6d39d162604811f885b55b0d9c6bd4994d81758a0","observation_id":"2be34ead-e6f5-41e0-b232-3b90ef083132","resolution":{"observed_at":"2026-08-06T18:17:55.730670Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T18:17:58.617475Z","title":"Improved Differential Privacy Noise Mechanism in Quantum Machine Learning,","venue":null,"work_id":"0079e642-7a13-4ff3-89e7-3c2a77f1bae2","year":2023},"citing_paper":{"arxiv_id":"2507.08623","last_updated":"2025-07-11T14:25:36Z","snapshot_observed_at":"2026-08-06T18:11:31.622235Z","submitted_at":"2025-07-11T14:25:36Z","title":"Entangled Threats: A Unified Kill Chain Model for Quantum Machine Learning Security","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-06T18:17:55.817559Z"},"links":{"citing_paper":"/paper/2507.08623"},"observation_digest":"sha256:13219e5e68f208af277344f4ef61b307dda1480a6a4a4d159fbe3eab34b88a40","observation_id":"b1153f64-ce61-4184-a7aa-d526ce60d03a","resolution":{"observed_at":"2026-08-06T18:17:58.694598Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T18:17:58.472538Z","title":"Differential Privacy in Quantum Computation,","venue":null,"work_id":"732fb1f3-383b-4e1b-9f03-cc4f9560fd45","year":2017},"citing_paper":{"arxiv_id":"2507.08623","last_updated":"2025-07-11T14:25:36Z","snapshot_observed_at":"2026-08-06T18:11:31.622235Z","submitted_at":"2025-07-11T14:25:36Z","title":"Entangled Threats: A Unified Kill Chain Model for Quantum Machine Learning Security","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-06T18:17:55.852601Z"},"links":{"citing_paper":"/paper/2507.08623"},"observation_digest":"sha256:4c4659a5ee8ef21d77131a30ad0af3fb5bffec841c83daceb3fcea02ab298408","observation_id":"66b42390-180d-4422-8213-0718f99cf24a","resolution":{"observed_at":"2026-08-06T18:17:58.518671Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T18:17:58.316863Z","title":"Quantum Differential Privacy: An Information Theory Perspective,","venue":null,"work_id":"727fa0fa-ef19-47b2-bfa3-cffd101afe54","year":2023},"citing_paper":{"arxiv_id":"2507.08623","last_updated":"2025-07-11T14:25:36Z","snapshot_observed_at":"2026-08-06T18:11:31.622235Z","submitted_at":"2025-07-11T14:25:36Z","title":"Entangled Threats: A Unified Kill Chain Model for Quantum Machine Learning Security","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-06T18:17:55.911616Z"},"links":{"citing_paper":"/paper/2507.08623"},"observation_digest":"sha256:f1d0675e3da1bd25f67bcf06205525f2cc98822a782b0497b80a0585e5e69845","observation_id":"71f28b71-375f-4c0d-bf8b-10175fab7a25","resolution":{"observed_at":"2026-08-06T18:17:58.398470Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T18:17:58.186472Z","title":"Heredge et al","venue":null,"work_id":"85a48762-8b6c-41b7-8c05-129b4c9b682c","year":2024},"citing_paper":{"arxiv_id":"2507.08623","last_updated":"2025-07-11T14:25:36Z","snapshot_observed_at":"2026-08-06T18:11:31.622235Z","submitted_at":"2025-07-11T14:25:36Z","title":"Entangled Threats: A Unified Kill Chain Model for Quantum Machine Learning Security","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-06T18:17:55.997541Z"},"links":{"citing_paper":"/paper/2507.08623"},"observation_digest":"sha256:bb3e0ecb8f8049d9d1aa085e409744b3e254940925788232ee70bf58ef9d1c95","observation_id":"60869766-453a-4c4f-8f5b-a9f90dfff577","resolution":{"observed_at":"2026-08-06T18:17:58.276718Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T18:17:58.041769Z","title":"Detecting Violations of Differential Privacy for Quantum Algorithms,","venue":null,"work_id":"2f27815f-7ece-4f7c-8760-a8dd929ac2fd","year":2023},"citing_paper":{"arxiv_id":"2507.08623","last_updated":"2025-07-11T14:25:36Z","snapshot_observed_at":"2026-08-06T18:11:31.622235Z","submitted_at":"2025-07-11T14:25:36Z","title":"Entangled Threats: A Unified Kill Chain Model for Quantum Machine Learning Security","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-06T18:17:56.073719Z"},"links":{"citing_paper":"/paper/2507.08623"},"observation_digest":"sha256:7d53eed962c47c50dcd392f8d8049f9d3408038d7cb8e83108465bbdcb93987d","observation_id":"97a5b11d-c01f-4065-a9bc-1416a01544a7","resolution":{"observed_at":"2026-08-06T18:17:58.110128Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T18:17:57.848741Z","title":"Quantum machine learning with differential privacy,","venue":null,"work_id":"6d8994b7-432d-486b-bf68-f0b8f7709f96","year":2023},"citing_paper":{"arxiv_id":"2507.08623","last_updated":"2025-07-11T14:25:36Z","snapshot_observed_at":"2026-08-06T18:11:31.622235Z","submitted_at":"2025-07-11T14:25:36Z","title":"Entangled Threats: A Unified Kill Chain Model for Quantum Machine Learning Security","version":1},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-06T18:17:56.175777Z"},"links":{"citing_paper":"/paper/2507.08623"},"observation_digest":"sha256:69017c1a95d50ce802216ec1621d5d138f064cfb72495e20e7c8fedb33dd6a0a","observation_id":"5ff7783c-1740-4d5f-b8e5-24ad7b7d641e","resolution":{"observed_at":"2026-08-06T18:17:57.950888Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T18:17:57.673644Z","title":"Universal Adversarial Exam- ples and Perturbations for Quantum Classifiers,","venue":null,"work_id":"ad84130e-ddc5-447a-bd43-b10016dcf948","year":2021},"citing_paper":{"arxiv_id":"2507.08623","last_updated":"2025-07-11T14:25:36Z","snapshot_observed_at":"2026-08-06T18:11:31.622235Z","submitted_at":"2025-07-11T14:25:36Z","title":"Entangled Threats: A Unified Kill Chain Model for Quantum Machine Learning Security","version":1},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-06T18:17:56.251385Z"},"links":{"citing_paper":"/paper/2507.08623"},"observation_digest":"sha256:2cbbccf18865546ddb7f97124a968ee4f9714a8e1bb96e5a70d02a49e8e5ef6f","observation_id":"45ce8a4d-2849-4b03-b86b-073a6b8de8e2","resolution":{"observed_at":"2026-08-06T18:17:57.740976Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2507.08623","last_updated":"2025-07-11T14:25:36Z","latest_version":1,"primary_category":"quant-ph","snapshot_observed_at":"2026-08-06T18:11:31.622235Z","submitted_at":"2025-07-11T14:25:36Z","title":"Entangled Threats: A Unified Kill Chain Model for Quantum Machine Learning Security"},"reference_resolution":{"displayed":51,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":5,"verified_exact":6,"verified_fuzzy":40},"total_outbound_references":51},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"thesis":"As of 7 August 2026, this Paper Citation Record lists 51 of 51 outbound references and 1 inbound Pith citation observation for arXiv:2507.08623."}