{"as_of":"2026-08-08T08:27:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:f9a2a55665317d7338cc56de5b3022c1b38e6f497a11341a4ce2d4d002153c66","coverage":[{"denominator":34,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":34,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-06T17:33:53.329238Z","state":"measured"},{"denominator":34,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":34,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-08T06:32:00.761636+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2507.10491/citation-record","integrity":"/paper/2507.10491/integrity","json":"/paper/2507.10491/citation-record.json","paper":"/paper/2507.10491"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:33:56.260154Z","title":"Superdeepfool: a new fast and accurate minimal adversarial attack","venue":null,"work_id":"743e9cef-627c-4879-a50c-841f21164e0b","year":2025},"citing_paper":{"arxiv_id":"2507.10491","last_updated":"2025-07-14T17:13:06Z","snapshot_observed_at":"2026-08-06T17:27:09.347274Z","submitted_at":"2025-07-14T17:13:06Z","title":"BURN: Backdoor Unlearning via Adversarial Boundary Analysis","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-06T17:33:48.051035Z"},"links":{"citing_paper":"/paper/2507.10491"},"observation_digest":"sha256:d88a6b9fb83fca71616d316f52632407d4839cfe829b1ae4ef88ed5f21e2489a","observation_id":"4bb7599a-dabe-4449-9b25-d1438c9d43f2","resolution":{"observed_at":"2026-08-06T17:33:56.330670Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:33:56.056060Z","title":"Blind backdoors in deep learning models","venue":null,"work_id":"14d25cb5-6ec0-42f3-8123-f0e2187fe74e","year":2021},"citing_paper":{"arxiv_id":"2507.10491","last_updated":"2025-07-14T17:13:06Z","snapshot_observed_at":"2026-08-06T17:27:09.347274Z","submitted_at":"2025-07-14T17:13:06Z","title":"BURN: Backdoor Unlearning via Adversarial Boundary Analysis","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-06T17:33:48.154208Z"},"links":{"citing_paper":"/paper/2507.10491"},"observation_digest":"sha256:0c83cc291778ffdc0f8e8e308132469220c42c86234f7ca8481b40875f19c385","observation_id":"8f50b441-a439-42ed-9d86-b6ca9b07a274","resolution":{"observed_at":"2026-08-06T17:33:56.155947Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1712.05526","last_updated":"2017-12-15T04:26:26Z","snapshot_observed_at":"2026-07-06T06:14:30.795326Z","submitted_at":"2017-12-15T04:26:26Z","title":"Targeted Backdoor Attacks on Deep Learning Systems Using Data Poisoning","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1712.05526","snapshot_observed_at":"2026-08-06T17:33:48.320522Z","title":"Targeted backdoor attacks on deep learning systems using data poisoning","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2507.10491","last_updated":"2025-07-14T17:13:06Z","snapshot_observed_at":"2026-08-06T17:27:09.347274Z","submitted_at":"2025-07-14T17:13:06Z","title":"BURN: Backdoor Unlearning via Adversarial Boundary Analysis","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-06T17:33:48.320522Z"},"links":{"cited_paper":"/paper/1712.05526","citing_paper":"/paper/2507.10491"},"observation_digest":"sha256:3a4a32dcb926158ccd7eb3859cda504fcfccfd2dfca5bb98710de64ceb615e4b","observation_id":"3232fc75-3be1-45da-a6f2-25c8e35b8e3b","resolution":{"observed_at":"2026-08-06T17:33:48.320522Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:33:48.491804Z","title":"Imagenet: A large-scale hierarchical image database","venue":null,"work_id":null,"year":2009},"citing_paper":{"arxiv_id":"2507.10491","last_updated":"2025-07-14T17:13:06Z","snapshot_observed_at":"2026-08-06T17:27:09.347274Z","submitted_at":"2025-07-14T17:13:06Z","title":"BURN: Backdoor Unlearning via Adversarial Boundary Analysis","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-06T17:33:48.491804Z"},"links":{"citing_paper":"/paper/2507.10491"},"observation_digest":"sha256:2778a999e584a5c810452604708729b28deeaa4d98eefa41d5fe91d021d46470","observation_id":"f54b9ff4-5d9f-40aa-926a-c9a3502eab09","resolution":{"observed_at":"2026-08-06T17:33:48.491804Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:33:55.841079Z","title":"Lira: Learnable, imperceptible and robust backdoor attacks","venue":null,"work_id":"2288bdfc-0dc2-4df8-9098-458050e8be68","year":2021},"citing_paper":{"arxiv_id":"2507.10491","last_updated":"2025-07-14T17:13:06Z","snapshot_observed_at":"2026-08-06T17:27:09.347274Z","submitted_at":"2025-07-14T17:13:06Z","title":"BURN: Backdoor Unlearning via Adversarial Boundary Analysis","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-06T17:33:48.645320Z"},"links":{"citing_paper":"/paper/2507.10491"},"observation_digest":"sha256:9fed970facc4ba42cbaf395da784391600671cb3217d9ebc7b5c73ba7e35d327","observation_id":"32f8017d-009c-4fd8-9f3c-cc2080bca890","resolution":{"observed_at":"2026-08-06T17:33:55.927272Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:33:55.805680Z","title":"Dermatologist-level classification of skin cancer with deep neural networks","venue":null,"work_id":"cfe441b1-9bda-48f1-b733-a5952dd35efc","year":2017},"citing_paper":{"arxiv_id":"2507.10491","last_updated":"2025-07-14T17:13:06Z","snapshot_observed_at":"2026-08-06T17:27:09.347274Z","submitted_at":"2025-07-14T17:13:06Z","title":"BURN: Backdoor Unlearning via Adversarial Boundary Analysis","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-06T17:33:48.885427Z"},"links":{"citing_paper":"/paper/2507.10491"},"observation_digest":"sha256:38903415d0d9d8ab5ff8585ab94fe907bbcdb8e709e88aae87a879dbb1afa5d7","observation_id":"651eaaae-6bf2-4741-9401-5a0f4fcf4368","resolution":{"observed_at":"2026-08-06T17:33:55.811085Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-07-06T05:56:16.413472Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1708.06733","snapshot_observed_at":"2026-08-06T17:33:49.039603Z","title":"Bad- nets: Identifying vulnerabilities in the machine learning model supply chain","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2507.10491","last_updated":"2025-07-14T17:13:06Z","snapshot_observed_at":"2026-08-06T17:27:09.347274Z","submitted_at":"2025-07-14T17:13:06Z","title":"BURN: Backdoor Unlearning via Adversarial Boundary Analysis","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-06T17:33:49.039603Z"},"links":{"cited_paper":"/paper/1708.06733","citing_paper":"/paper/2507.10491"},"observation_digest":"sha256:6bfbb643ab16e51e7dda44ef6bed8eeec20d3d84a902dbbb9ede08516711cd8a","observation_id":"40b5107f-703f-4c42-bb9a-2c8ec26950c4","resolution":{"observed_at":"2026-08-06T17:33:49.039603Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:33:55.792228Z","title":"Identity mappings in deep residual networks","venue":null,"work_id":"d8448318-4f0d-4923-809d-7d400db75c9a","year":2016},"citing_paper":{"arxiv_id":"2507.10491","last_updated":"2025-07-14T17:13:06Z","snapshot_observed_at":"2026-08-06T17:27:09.347274Z","submitted_at":"2025-07-14T17:13:06Z","title":"BURN: Backdoor Unlearning via Adversarial Boundary Analysis","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-06T17:33:49.220020Z"},"links":{"citing_paper":"/paper/2507.10491"},"observation_digest":"sha256:abe3ca3ac7adf04eb8d272eb693ab0ff4b77530c41c4ce1b29d0ec55fc716da7","observation_id":"2b33d4fc-4dd1-4cc1-98e8-23840586146a","resolution":{"observed_at":"2026-08-06T17:33:55.795968Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2202.03423","last_updated":"2022-02-05T03:34:01Z","snapshot_observed_at":"2026-08-08T06:24:33.137819Z","submitted_at":"2022-02-05T03:34:01Z","title":"Backdoor Defense via Decoupling the Training Process","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2202.03423","snapshot_observed_at":"2026-08-06T17:33:49.387199Z","title":"Backdoor defense via decoupling the training process","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2507.10491","last_updated":"2025-07-14T17:13:06Z","snapshot_observed_at":"2026-08-06T17:27:09.347274Z","submitted_at":"2025-07-14T17:13:06Z","title":"BURN: Backdoor Unlearning via Adversarial Boundary Analysis","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-06T17:33:49.387199Z"},"links":{"cited_paper":"/paper/2202.03423","citing_paper":"/paper/2507.10491"},"observation_digest":"sha256:09944fccf63e17f42faae2e15c4ce991ce96ee83d907b1c88f8d24db296ad255","observation_id":"97c2c446-8782-4311-9505-6091ab84845d","resolution":{"observed_at":"2026-08-06T17:33:49.387199Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:33:49.508648Z","title":"Learning multiple layers of features from tiny images","venue":null,"work_id":null,"year":2009},"citing_paper":{"arxiv_id":"2507.10491","last_updated":"2025-07-14T17:13:06Z","snapshot_observed_at":"2026-08-06T17:27:09.347274Z","submitted_at":"2025-07-14T17:13:06Z","title":"BURN: Backdoor Unlearning via Adversarial Boundary Analysis","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-06T17:33:49.508648Z"},"links":{"citing_paper":"/paper/2507.10491"},"observation_digest":"sha256:f0d7e9795c32bf008e58326e770719102d61d797cde75e018bc6272f4751b076","observation_id":"435f5796-b775-41c5-bf91-283d984dc678","resolution":{"observed_at":"2026-08-06T17:33:49.508648Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:33:55.771606Z","title":"Invisible backdoor attack with sample-specific triggers","venue":null,"work_id":"25883a5a-8968-4e18-a595-1016b34f5c41","year":2021},"citing_paper":{"arxiv_id":"2507.10491","last_updated":"2025-07-14T17:13:06Z","snapshot_observed_at":"2026-08-06T17:27:09.347274Z","submitted_at":"2025-07-14T17:13:06Z","title":"BURN: Backdoor Unlearning via Adversarial Boundary Analysis","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-06T17:33:49.618490Z"},"links":{"citing_paper":"/paper/2507.10491"},"observation_digest":"sha256:a3b0914b9947a3287a20582488b6480dbbf3e9ada4d955877eb6c0fd6dca7f33","observation_id":"d2cde874-5a0f-4ed4-ae4a-a197250163d4","resolution":{"observed_at":"2026-08-06T17:33:55.775497Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2101.05930","last_updated":"2021-01-27T06:23:25Z","snapshot_observed_at":"2026-07-06T10:32:42.591643Z","submitted_at":"2021-01-15T01:35:22Z","title":"Neural Attention Distillation: Erasing Backdoor Triggers from Deep Neural Networks","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2101.05930","snapshot_observed_at":"2026-08-06T17:33:49.807827Z","title":"Neural attention distillation: Erasing backdoor triggers from deep neural networks","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2507.10491","last_updated":"2025-07-14T17:13:06Z","snapshot_observed_at":"2026-08-06T17:27:09.347274Z","submitted_at":"2025-07-14T17:13:06Z","title":"BURN: Backdoor Unlearning via Adversarial Boundary Analysis","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-06T17:33:49.807827Z"},"links":{"cited_paper":"/paper/2101.05930","citing_paper":"/paper/2507.10491"},"observation_digest":"sha256:bcf286f7f23f016a3952b6cf4bd1c8f8d63f0747cfe89700761e8fc1428ae0c0","observation_id":"09d81821-9783-465e-a588-f927c20ee1df","resolution":{"observed_at":"2026-08-06T17:33:49.807827Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:33:55.758894Z","title":"Fine- pruning: Defending against backdooring attacks on deep neural networks","venue":null,"work_id":"e395d38f-bde6-486d-8d88-1ad97507d643","year":null},"citing_paper":{"arxiv_id":"2507.10491","last_updated":"2025-07-14T17:13:06Z","snapshot_observed_at":"2026-08-06T17:27:09.347274Z","submitted_at":"2025-07-14T17:13:06Z","title":"BURN: Backdoor Unlearning via Adversarial Boundary Analysis","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-06T17:33:49.946195Z"},"links":{"citing_paper":"/paper/2507.10491"},"observation_digest":"sha256:e015548d4d2aa1c0941eed8ec91ae479bdc93184c67b986c329496115a8b9564","observation_id":"9a87a150-226b-499b-a806-852479a28445","resolution":{"observed_at":"2026-08-06T17:33:55.763688Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:33:55.746540Z","title":"Trojaning attack on neural networks","venue":null,"work_id":"3abe9054-2c5f-4f38-91ae-1992f9353da7","year":2018},"citing_paper":{"arxiv_id":"2507.10491","last_updated":"2025-07-14T17:13:06Z","snapshot_observed_at":"2026-08-06T17:27:09.347274Z","submitted_at":"2025-07-14T17:13:06Z","title":"BURN: Backdoor Unlearning via Adversarial Boundary Analysis","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-06T17:33:50.070529Z"},"links":{"citing_paper":"/paper/2507.10491"},"observation_digest":"sha256:d8822b2783dafd33991de5640c4dd3c0fa4959c7cbad852e3857b7ca48e1497f","observation_id":"89a81f6d-4891-428b-bd36-556607503750","resolution":{"observed_at":"2026-08-06T17:33:55.750371Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:33:55.734632Z","title":"Abs: Scanning neural networks for back-doors by artificial brain stimulation","venue":null,"work_id":"037c6236-14aa-4f5c-989a-1cceb091f846","year":2019},"citing_paper":{"arxiv_id":"2507.10491","last_updated":"2025-07-14T17:13:06Z","snapshot_observed_at":"2026-08-06T17:27:09.347274Z","submitted_at":"2025-07-14T17:13:06Z","title":"BURN: Backdoor Unlearning via Adversarial Boundary Analysis","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-06T17:33:50.267563Z"},"links":{"citing_paper":"/paper/2507.10491"},"observation_digest":"sha256:f86492fdf47fecb64078676fc304d58c6e425fc68728c66ad1716825995d34ae","observation_id":"b31639b8-4297-4ed7-8e28-0ecc7dcbbee1","resolution":{"observed_at":"2026-08-06T17:33:55.738446Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:33:55.721774Z","title":"Deepfool: a simple and accurate method to fool deep neural networks","venue":null,"work_id":"64cfe372-fa88-419e-a421-8cc9779d9890","year":2016},"citing_paper":{"arxiv_id":"2507.10491","last_updated":"2025-07-14T17:13:06Z","snapshot_observed_at":"2026-08-06T17:27:09.347274Z","submitted_at":"2025-07-14T17:13:06Z","title":"BURN: Backdoor Unlearning via Adversarial Boundary Analysis","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-06T17:33:50.499657Z"},"links":{"citing_paper":"/paper/2507.10491"},"observation_digest":"sha256:1b70b61b64cde6f6566693a7eb3fd1b8e7770c7867f768317117bcdeb8e9af64","observation_id":"036b8f8c-05f2-44de-bc48-199d67e508e4","resolution":{"observed_at":"2026-08-06T17:33:55.725744Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:33:55.710157Z","title":"Progressive backdoor erasing via connecting backdoor and adversarial attacks","venue":null,"work_id":"fefe1239-7d92-4a45-a6cc-04fa296b88f2","year":2023},"citing_paper":{"arxiv_id":"2507.10491","last_updated":"2025-07-14T17:13:06Z","snapshot_observed_at":"2026-08-06T17:27:09.347274Z","submitted_at":"2025-07-14T17:13:06Z","title":"BURN: Backdoor Unlearning via Adversarial Boundary Analysis","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-06T17:33:50.653675Z"},"links":{"citing_paper":"/paper/2507.10491"},"observation_digest":"sha256:34372e2aba2dcd1dfc68b6d16f7b25f2402373d7793e309a25623e61d4ba1b24","observation_id":"3eb1b591-ed82-45b0-9df8-fb99b99ffc86","resolution":{"observed_at":"2026-08-06T17:33:55.713830Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:33:55.697698Z","title":"Input-aware dynamic back- door attack","venue":null,"work_id":"4719e560-131a-45b5-933c-1e6fe5d70dbb","year":2020},"citing_paper":{"arxiv_id":"2507.10491","last_updated":"2025-07-14T17:13:06Z","snapshot_observed_at":"2026-08-06T17:27:09.347274Z","submitted_at":"2025-07-14T17:13:06Z","title":"BURN: Backdoor Unlearning via Adversarial Boundary Analysis","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-06T17:33:50.789948Z"},"links":{"citing_paper":"/paper/2507.10491"},"observation_digest":"sha256:29518d2512ec59b8e920cfff38316557b60c45fc7d56640b1a382f30b6bc23f1","observation_id":"58e706fe-d829-4585-89da-b19cc9c3458e","resolution":{"observed_at":"2026-08-06T17:33:55.701818Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:33:55.684548Z","title":"Deep face recognition","venue":null,"work_id":"bad05a62-a20a-4243-ab9d-16f4cf275f8c","year":2015},"citing_paper":{"arxiv_id":"2507.10491","last_updated":"2025-07-14T17:13:06Z","snapshot_observed_at":"2026-08-06T17:27:09.347274Z","submitted_at":"2025-07-14T17:13:06Z","title":"BURN: Backdoor Unlearning via Adversarial Boundary Analysis","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-06T17:33:50.905856Z"},"links":{"citing_paper":"/paper/2507.10491"},"observation_digest":"sha256:a5be26516e356473a1525398e0018a8a8850400a5e141c185b63ed57f4fbd963","observation_id":"7c8b2cfb-2ea8-4a01-b409-3432a59c073b","resolution":{"observed_at":"2026-08-06T17:33:55.688750Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2308.15673","last_updated":"2023-09-03T01:59:49Z","snapshot_observed_at":"2026-07-06T16:12:02.944409Z","submitted_at":"2023-08-30T00:03:03Z","title":"MDTD: A Multi Domain Trojan Detector for Deep Neural Networks","version":2},"cited_work":{"arxiv_id":"2308.15673","doi":null,"metadata_source":"pith","pith_arxiv_id":"2308.15673","snapshot_observed_at":"2026-08-06T17:33:53.507801Z","title":"MDTD: A Multi Domain Trojan Detector for Deep Neural Networks","venue":"cs.CR","work_id":"d2eb6e40-1bc7-46ed-8aa7-dbed0b219add","year":2023},"citing_paper":{"arxiv_id":"2507.10491","last_updated":"2025-07-14T17:13:06Z","snapshot_observed_at":"2026-08-06T17:27:09.347274Z","submitted_at":"2025-07-14T17:13:06Z","title":"BURN: Backdoor Unlearning via Adversarial Boundary Analysis","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-06T17:33:51.020301Z"},"links":{"cited_paper":"/paper/2308.15673","citing_paper":"/paper/2507.10491"},"observation_digest":"sha256:54d04c8c28499adead2103f24782e41e7ac1ea04824bdb5884efc7214f8e9f38","observation_id":"519b571f-c499-4fe4-8ba8-bd96ddfe5bff","resolution":{"observed_at":"2026-08-06T17:33:53.595000Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:33:55.672451Z","title":"You only look once: Unified, real-time object de- tection","venue":null,"work_id":"988f9444-df15-4a27-902a-2d5e96b12204","year":2016},"citing_paper":{"arxiv_id":"2507.10491","last_updated":"2025-07-14T17:13:06Z","snapshot_observed_at":"2026-08-06T17:27:09.347274Z","submitted_at":"2025-07-14T17:13:06Z","title":"BURN: Backdoor Unlearning via Adversarial Boundary Analysis","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-06T17:33:51.167127Z"},"links":{"citing_paper":"/paper/2507.10491"},"observation_digest":"sha256:a14e8616a9eea1b0a5844f939bb179fc2a197de07c80ab44f258a1a8f80fc757","observation_id":"bf34167e-77ae-49e5-8327-a69a68986a70","resolution":{"observed_at":"2026-08-06T17:33:55.676238Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:33:55.638913Z","title":"Universal backdoor attacks","venue":null,"work_id":"5a55ae5f-7214-4223-a580-1c0193ab4c44","year":2024},"citing_paper":{"arxiv_id":"2507.10491","last_updated":"2025-07-14T17:13:06Z","snapshot_observed_at":"2026-08-06T17:27:09.347274Z","submitted_at":"2025-07-14T17:13:06Z","title":"BURN: Backdoor Unlearning via Adversarial Boundary Analysis","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-06T17:33:51.302852Z"},"links":{"citing_paper":"/paper/2507.10491"},"observation_digest":"sha256:c2468766d5f23eeb6fa094fd686aea51245d1297b011250c7c1414457503b2d7","observation_id":"b6122c3f-8a0b-4203-909e-6b128af8d073","resolution":{"observed_at":"2026-08-06T17:33:55.663915Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:33:55.542682Z","title":"Model x-ray: Detecting backdoored models via decision boundary","venue":null,"work_id":"89b1abb8-8bb6-4b8d-b931-ec1801ac09b3","year":2024},"citing_paper":{"arxiv_id":"2507.10491","last_updated":"2025-07-14T17:13:06Z","snapshot_observed_at":"2026-08-06T17:27:09.347274Z","submitted_at":"2025-07-14T17:13:06Z","title":"BURN: Backdoor Unlearning via Adversarial Boundary Analysis","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-06T17:33:51.451487Z"},"links":{"citing_paper":"/paper/2507.10491"},"observation_digest":"sha256:2ff4430d1998109b58a85aa1769553962fe1a32bc87ecf6d314f9c98b5db6f6a","observation_id":"6e4c47e5-d67d-42c1-a757-11b3a28d145f","resolution":{"observed_at":"2026-08-06T17:33:55.627196Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1912.02771","last_updated":"2019-12-06T23:16:45Z","snapshot_observed_at":"2026-08-04T11:47:47.518305Z","submitted_at":"2019-12-05T18:05:59Z","title":"Label-Consistent Backdoor Attacks","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1912.02771","snapshot_observed_at":"2026-08-06T17:33:51.578940Z","title":"Label-consistent backdoor attacks","venue":null,"work_id":null,"year":1912},"citing_paper":{"arxiv_id":"2507.10491","last_updated":"2025-07-14T17:13:06Z","snapshot_observed_at":"2026-08-06T17:27:09.347274Z","submitted_at":"2025-07-14T17:13:06Z","title":"BURN: Backdoor Unlearning via Adversarial Boundary Analysis","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-06T17:33:51.578940Z"},"links":{"cited_paper":"/paper/1912.02771","citing_paper":"/paper/2507.10491"},"observation_digest":"sha256:ad6d4a19a5a48410ae1add5293bd68ccaff5cfacc8d3c1e7c7e6b5a8a6529449","observation_id":"52371684-3e19-4543-8f27-7295932f9c19","resolution":{"observed_at":"2026-08-06T17:33:51.578940Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:33:55.390859Z","title":"Neural cleanse: Identifying and mitigating backdoor attacks in neural net- works","venue":null,"work_id":"71f76791-e9d9-4c31-a932-3d094147800c","year":2019},"citing_paper":{"arxiv_id":"2507.10491","last_updated":"2025-07-14T17:13:06Z","snapshot_observed_at":"2026-08-06T17:27:09.347274Z","submitted_at":"2025-07-14T17:13:06Z","title":"BURN: Backdoor Unlearning via Adversarial Boundary Analysis","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-06T17:33:51.679878Z"},"links":{"citing_paper":"/paper/2507.10491"},"observation_digest":"sha256:54802c1c5a2de9d838fb2cfd4c6a9f3b7ea2b5ef9021ba2e8283972f7f5c9367","observation_id":"c365a357-1c99-4bd2-a5d4-e150d8911212","resolution":{"observed_at":"2026-08-06T17:33:55.463645Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:33:55.190492Z","title":"Bppattack: Stealthy and efficient trojan attacks against deep neural net- works via image quantization and contrastive adversarial learning","venue":null,"work_id":"10e659ad-cff3-4e68-a3f3-2435f1510af7","year":2022},"citing_paper":{"arxiv_id":"2507.10491","last_updated":"2025-07-14T17:13:06Z","snapshot_observed_at":"2026-08-06T17:27:09.347274Z","submitted_at":"2025-07-14T17:13:06Z","title":"BURN: Backdoor Unlearning via Adversarial Boundary Analysis","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-06T17:33:51.888686Z"},"links":{"citing_paper":"/paper/2507.10491"},"observation_digest":"sha256:48fc926a2890281f4ac2d56c833a2c570ab610085540afb46585b7ca31ea4197","observation_id":"18eb872c-e02d-4c6d-8013-02dfd9b148c0","resolution":{"observed_at":"2026-08-06T17:33:55.266130Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:33:54.995421Z","title":"Shared adversarial unlearning: Backdoor mitigation by unlearning shared adversarial examples","venue":null,"work_id":"1fabbaaf-8313-4c8c-834a-1aeddc1e41ae","year":2023},"citing_paper":{"arxiv_id":"2507.10491","last_updated":"2025-07-14T17:13:06Z","snapshot_observed_at":"2026-08-06T17:27:09.347274Z","submitted_at":"2025-07-14T17:13:06Z","title":"BURN: Backdoor Unlearning via Adversarial Boundary Analysis","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-06T17:33:52.104328Z"},"links":{"citing_paper":"/paper/2507.10491"},"observation_digest":"sha256:1285248c290fa513c9a689c0f4db79d8e751b6f070b9457ec1972ba3999273f0","observation_id":"a137bcd9-2ab6-4c64-9072-0cb2e670ec9f","resolution":{"observed_at":"2026-08-06T17:33:55.072373Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:33:54.781961Z","title":"Backdoorbench: A comprehensive benchmark of backdoor learning","venue":null,"work_id":"0f0773ae-473b-452e-af6b-3e534ea632ce","year":null},"citing_paper":{"arxiv_id":"2507.10491","last_updated":"2025-07-14T17:13:06Z","snapshot_observed_at":"2026-08-06T17:27:09.347274Z","submitted_at":"2025-07-14T17:13:06Z","title":"BURN: Backdoor Unlearning via Adversarial Boundary Analysis","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-06T17:33:52.281972Z"},"links":{"citing_paper":"/paper/2507.10491"},"observation_digest":"sha256:1365efd46212f4f4d49965e3b727f61bfbd693671f2556b4ea644a9867be5665","observation_id":"9d13d241-3a06-4b7f-9852-25de9e4931b7","resolution":{"observed_at":"2026-08-06T17:33:54.883878Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:33:54.599508Z","title":"Adversarial neuron prun- ing purifies backdoored deep models","venue":null,"work_id":"8d9123b3-0e08-4dd0-970a-1692506e5780","year":2021},"citing_paper":{"arxiv_id":"2507.10491","last_updated":"2025-07-14T17:13:06Z","snapshot_observed_at":"2026-08-06T17:27:09.347274Z","submitted_at":"2025-07-14T17:13:06Z","title":"BURN: Backdoor Unlearning via Adversarial Boundary Analysis","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-06T17:33:52.464395Z"},"links":{"citing_paper":"/paper/2507.10491"},"observation_digest":"sha256:d53331de5b4437f4b29523e1ee7ef9c1134eeca552b63bd772933769d0293c77","observation_id":"95d67ba4-1fcc-4322-90ba-b4bfc10ced2c","resolution":{"observed_at":"2026-08-06T17:33:54.680626Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:33:54.345024Z","title":"Cbd: A certified back- door detector based on local dominant probability","venue":null,"work_id":"be3b773e-4df0-4617-a107-5e76564360fe","year":2024},"citing_paper":{"arxiv_id":"2507.10491","last_updated":"2025-07-14T17:13:06Z","snapshot_observed_at":"2026-08-06T17:27:09.347274Z","submitted_at":"2025-07-14T17:13:06Z","title":"BURN: Backdoor Unlearning via Adversarial Boundary Analysis","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-06T17:33:52.631175Z"},"links":{"citing_paper":"/paper/2507.10491"},"observation_digest":"sha256:037a7550a4cd430555a0321fad0bd1d7b0756522054974e4c4cff9c98183ccde","observation_id":"504b98d9-d897-4c9f-a353-a9c0b378ce7f","resolution":{"observed_at":"2026-08-06T17:33:54.470676Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2110.03735","last_updated":"2022-02-06T21:26:28Z","snapshot_observed_at":"2026-07-06T11:55:35.648043Z","submitted_at":"2021-10-07T18:32:54Z","title":"Adversarial Unlearning of Backdoors via Implicit Hypergradient","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2110.03735","snapshot_observed_at":"2026-08-06T17:33:52.804575Z","title":"Adversarial unlearning of backdoors via implicit hypergradient","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2507.10491","last_updated":"2025-07-14T17:13:06Z","snapshot_observed_at":"2026-08-06T17:27:09.347274Z","submitted_at":"2025-07-14T17:13:06Z","title":"BURN: Backdoor Unlearning via Adversarial Boundary Analysis","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-06T17:33:52.804575Z"},"links":{"cited_paper":"/paper/2110.03735","citing_paper":"/paper/2507.10491"},"observation_digest":"sha256:f4e82e586f2eb3471d57d80407b5926ecf65d416dff729ac0ceb398a69f09162","observation_id":"c112a32a-9fff-4865-955a-8573fb044fe0","resolution":{"observed_at":"2026-08-06T17:33:52.804575Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:33:54.096393Z","title":"Re- thinking the backdoor attacks’ triggers: A frequency per- spective","venue":null,"work_id":"39f9fcda-5dc0-4825-a082-34427ad1e1e2","year":2021},"citing_paper":{"arxiv_id":"2507.10491","last_updated":"2025-07-14T17:13:06Z","snapshot_observed_at":"2026-08-06T17:27:09.347274Z","submitted_at":"2025-07-14T17:13:06Z","title":"BURN: Backdoor Unlearning via Adversarial Boundary Analysis","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-06T17:33:52.980657Z"},"links":{"citing_paper":"/paper/2507.10491"},"observation_digest":"sha256:991724d846a2ea8e457a5c1a24ccd763d7382e3328c3be12acaa9eb5544861a0","observation_id":"c06b8b86-824c-49e2-a676-4228aaef1a34","resolution":{"observed_at":"2026-08-06T17:33:54.207373Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:33:53.911589Z","title":"Poison ink: Robust and invisible backdoor attack","venue":null,"work_id":"ce0d814a-5e2e-4fb3-914c-2ecc6ae7b5ab","year":2022},"citing_paper":{"arxiv_id":"2507.10491","last_updated":"2025-07-14T17:13:06Z","snapshot_observed_at":"2026-08-06T17:27:09.347274Z","submitted_at":"2025-07-14T17:13:06Z","title":"BURN: Backdoor Unlearning via Adversarial Boundary Analysis","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-06T17:33:53.169511Z"},"links":{"citing_paper":"/paper/2507.10491"},"observation_digest":"sha256:502d5bf66a11dff745d0c91c5afa2a8d7cd1a1a3ac6949deaf33ff81796cd435","observation_id":"024f1b48-d532-4eb8-93de-be88633febb3","resolution":{"observed_at":"2026-08-06T17:33:53.979510Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:33:53.742838Z","title":"Enhancing fine-tuning based backdoor defense with sharpness-aware minimization","venue":null,"work_id":"dd197feb-edda-4842-887f-74c1aa8ee3c7","year":2023},"citing_paper":{"arxiv_id":"2507.10491","last_updated":"2025-07-14T17:13:06Z","snapshot_observed_at":"2026-08-06T17:27:09.347274Z","submitted_at":"2025-07-14T17:13:06Z","title":"BURN: Backdoor Unlearning via Adversarial Boundary Analysis","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-06T17:33:53.329238Z"},"links":{"citing_paper":"/paper/2507.10491"},"observation_digest":"sha256:48541a8b4e01739586edc971c1d2da209194223b35b3e62bfc4c5d2dfe4e57fd","observation_id":"ccd8d356-65cc-412b-8fc6-2b8c951ed8cf","resolution":{"observed_at":"2026-08-06T17:33:53.839880Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2507.10491","last_updated":"2025-07-14T17:13:06Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-06T17:27:09.347274Z","submitted_at":"2025-07-14T17:13:06Z","title":"BURN: Backdoor Unlearning via Adversarial Boundary Analysis"},"reference_resolution":{"displayed":34,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":8,"verified_exact":1,"verified_fuzzy":25},"total_outbound_references":34},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"thesis":"As of 8 August 2026, this Paper Citation Record lists 34 of 34 outbound references and 0 inbound Pith citation observations for arXiv:2507.10491."}