{"as_of":"2026-08-07T13:17:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:809fc4090139aaece29d39f0bde388c97cd0e2c12b271c59ef4da9f5f3e8b16d","coverage":[{"denominator":46,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":46,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-06T14:05:02.319374Z","state":"measured"},{"denominator":46,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":46,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-07T06:34:17.273281+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2507.21177/citation-record","integrity":"/paper/2507.21177/integrity","json":"/paper/2507.21177/citation-record.json","paper":"/paper/2507.21177"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T14:05:02.957878Z","title":null,"venue":null,"work_id":"8fbc15cf-98d5-4364-925e-50c7903a696e","year":2020},"citing_paper":{"arxiv_id":"2507.21177","last_updated":"2025-07-26T07:00:32Z","snapshot_observed_at":"2026-08-06T14:04:57.093969Z","submitted_at":"2025-07-26T07:00:32Z","title":"FedBAP: Backdoor Defense via Benign Adversarial Perturbation in Federated Learning","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-06T14:04:58.590926Z"},"links":{"citing_paper":"/paper/2507.21177"},"observation_digest":"sha256:871d3c92d3566fea840052e0cfa89e5725e8f6fe3cb3dbf0421c87292934cd58","observation_id":"d861fe75-b78b-4d9e-b27c-844587e14917","resolution":{"observed_at":"2026-08-06T14:05:02.960708Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T14:04:58.681316Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2507.21177","last_updated":"2025-07-26T07:00:32Z","snapshot_observed_at":"2026-08-06T14:04:57.093969Z","submitted_at":"2025-07-26T07:00:32Z","title":"FedBAP: Backdoor Defense via Benign Adversarial Perturbation in Federated Learning","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-06T14:04:58.681316Z"},"links":{"citing_paper":"/paper/2507.21177"},"observation_digest":"sha256:31e18a06209240c5485c0ba55b50c992adc825f1aa47b9aedd614d1afd5fc03d","observation_id":"9d335b95-69b4-4280-b9cc-31b79f8d0e94","resolution":{"observed_at":"2026-08-06T14:04:58.681316Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2012.13995","last_updated":"2022-04-12T01:56:47Z","snapshot_observed_at":"2026-07-06T10:28:06.533127Z","submitted_at":"2020-12-27T18:43:39Z","title":"FLTrust: Byzantine-robust Federated Learning via Trust Bootstrapping","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2012.13995","snapshot_observed_at":"2026-08-06T14:04:58.839894Z","title":null,"venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2507.21177","last_updated":"2025-07-26T07:00:32Z","snapshot_observed_at":"2026-08-06T14:04:57.093969Z","submitted_at":"2025-07-26T07:00:32Z","title":"FedBAP: Backdoor Defense via Benign Adversarial Perturbation in Federated Learning","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-06T14:04:58.839894Z"},"links":{"cited_paper":"/paper/2012.13995","citing_paper":"/paper/2507.21177"},"observation_digest":"sha256:bae8efd2de01a76c7541997462d8c9831b840e4965ef00ae2fbcc58f9590d55b","observation_id":"35e62619-b54d-4154-a362-5de5c403fa40","resolution":{"observed_at":"2026-08-06T14:04:58.839894Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T14:05:02.934008Z","title":null,"venue":null,"work_id":"e020e6d2-394e-4bc0-89ec-dc5044d92929","year":2021},"citing_paper":{"arxiv_id":"2507.21177","last_updated":"2025-07-26T07:00:32Z","snapshot_observed_at":"2026-08-06T14:04:57.093969Z","submitted_at":"2025-07-26T07:00:32Z","title":"FedBAP: Backdoor Defense via Benign Adversarial Perturbation in Federated Learning","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-06T14:04:58.887029Z"},"links":{"citing_paper":"/paper/2507.21177"},"observation_digest":"sha256:c713071d7845eddbf954c3f53728d835db84c787e4de6b7673470097ea7ce161","observation_id":"dbadce7d-e5c6-4f85-8b70-2c08494c74c8","resolution":{"observed_at":"2026-08-06T14:05:02.936611Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T14:05:02.925222Z","title":null,"venue":null,"work_id":"2f884171-4777-451c-90d8-d6a6689a1071","year":2020},"citing_paper":{"arxiv_id":"2507.21177","last_updated":"2025-07-26T07:00:32Z","snapshot_observed_at":"2026-08-06T14:04:57.093969Z","submitted_at":"2025-07-26T07:00:32Z","title":"FedBAP: Backdoor Defense via Benign Adversarial Perturbation in Federated Learning","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-06T14:04:58.983745Z"},"links":{"citing_paper":"/paper/2507.21177"},"observation_digest":"sha256:10e7acd848eeb46418be4329eb6985d59da8be4ec3b0206377bf0dab2f8c8451","observation_id":"bc6efbd7-0467-425b-ab7d-0a8b946ca221","resolution":{"observed_at":"2026-08-06T14:05:02.928015Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T14:05:02.916058Z","title":null,"venue":null,"work_id":"6de161c4-aa39-4bc4-bdb5-48ffe7b485df","year":2023},"citing_paper":{"arxiv_id":"2507.21177","last_updated":"2025-07-26T07:00:32Z","snapshot_observed_at":"2026-08-06T14:04:57.093969Z","submitted_at":"2025-07-26T07:00:32Z","title":"FedBAP: Backdoor Defense via Benign Adversarial Perturbation in Federated Learning","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-06T14:04:59.050342Z"},"links":{"citing_paper":"/paper/2507.21177"},"observation_digest":"sha256:202e71604a7baa7282dd8ea5883cc4254043f7f47b5c1ea29cb705bc0dce51a8","observation_id":"4915d65c-65dc-4258-b35b-58237bccccde","resolution":{"observed_at":"2026-08-06T14:05:02.918954Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T14:05:02.907768Z","title":null,"venue":null,"work_id":"87689d60-0e8f-4a94-968b-b906c95afe45","year":2023},"citing_paper":{"arxiv_id":"2507.21177","last_updated":"2025-07-26T07:00:32Z","snapshot_observed_at":"2026-08-06T14:04:57.093969Z","submitted_at":"2025-07-26T07:00:32Z","title":"FedBAP: Backdoor Defense via Benign Adversarial Perturbation in Federated Learning","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-06T14:04:59.156910Z"},"links":{"citing_paper":"/paper/2507.21177"},"observation_digest":"sha256:257c774e75077564f7f6a5b9ee07cf4c68700e958d20168c0473893eed5bbd95","observation_id":"3c93190c-482d-4d17-bdf2-0f5b3675a926","resolution":{"observed_at":"2026-08-06T14:05:02.910339Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-07-06T05:56:16.413472Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1708.06733","snapshot_observed_at":"2026-08-06T14:04:59.205807Z","title":null,"venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2507.21177","last_updated":"2025-07-26T07:00:32Z","snapshot_observed_at":"2026-08-06T14:04:57.093969Z","submitted_at":"2025-07-26T07:00:32Z","title":"FedBAP: Backdoor Defense via Benign Adversarial Perturbation in Federated Learning","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-06T14:04:59.205807Z"},"links":{"cited_paper":"/paper/1708.06733","citing_paper":"/paper/2507.21177"},"observation_digest":"sha256:48794c1afaa9ad7b1f6b1b36e11e5b6e98905d2cac64db11f4a3dd9a7da4a6e9","observation_id":"a1e29961-a195-4f22-88fc-d8d6a9381f52","resolution":{"observed_at":"2026-08-06T14:04:59.205807Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1811.03604","last_updated":"2019-02-28T21:07:51Z","snapshot_observed_at":"2026-07-06T07:13:34.019157Z","submitted_at":"2018-11-08T18:37:03Z","title":"Federated Learning for Mobile Keyboard Prediction","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1811.03604","snapshot_observed_at":"2026-08-06T14:04:59.270501Z","title":null,"venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2507.21177","last_updated":"2025-07-26T07:00:32Z","snapshot_observed_at":"2026-08-06T14:04:57.093969Z","submitted_at":"2025-07-26T07:00:32Z","title":"FedBAP: Backdoor Defense via Benign Adversarial Perturbation in Federated Learning","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-06T14:04:59.270501Z"},"links":{"cited_paper":"/paper/1811.03604","citing_paper":"/paper/2507.21177"},"observation_digest":"sha256:be251a6fd1c79653e0000dc2a172101386d9b04235095f75ac5b37f7ef140429","observation_id":"eb5fa2ff-486a-4e65-b665-51cfc12e7706","resolution":{"observed_at":"2026-08-06T14:04:59.270501Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T14:05:02.898677Z","title":null,"venue":null,"work_id":"845ad18d-4d8f-4d13-b5e6-a281e2aef628","year":2023},"citing_paper":{"arxiv_id":"2507.21177","last_updated":"2025-07-26T07:00:32Z","snapshot_observed_at":"2026-08-06T14:04:57.093969Z","submitted_at":"2025-07-26T07:00:32Z","title":"FedBAP: Backdoor Defense via Benign Adversarial Perturbation in Federated Learning","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-06T14:04:59.360662Z"},"links":{"citing_paper":"/paper/2507.21177"},"observation_digest":"sha256:c1eff8ff28104909183b5c3fa46d75608f6028846f65c531df035e2c79df0934","observation_id":"c9fc9d6e-b0cf-4e36-88da-6ae678e23534","resolution":{"observed_at":"2026-08-06T14:05:02.901684Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T14:05:02.890006Z","title":null,"venue":null,"work_id":"2510c8b0-c3c2-4e9b-a70d-ee648751e946","year":2024},"citing_paper":{"arxiv_id":"2507.21177","last_updated":"2025-07-26T07:00:32Z","snapshot_observed_at":"2026-08-06T14:04:57.093969Z","submitted_at":"2025-07-26T07:00:32Z","title":"FedBAP: Backdoor Defense via Benign Adversarial Perturbation in Federated Learning","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-06T14:04:59.444399Z"},"links":{"citing_paper":"/paper/2507.21177"},"observation_digest":"sha256:8d5661e2f987d13b707317215f48538e1be2d7f1cb440eef8f1f408371bcb925","observation_id":"7ffdd8a5-7601-4b33-81f9-931652b2eee6","resolution":{"observed_at":"2026-08-06T14:05:02.892642Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T14:05:02.881454Z","title":null,"venue":null,"work_id":"5fcbabfa-e94b-42d0-8903-bceddf29b1b9","year":2023},"citing_paper":{"arxiv_id":"2507.21177","last_updated":"2025-07-26T07:00:32Z","snapshot_observed_at":"2026-08-06T14:04:57.093969Z","submitted_at":"2025-07-26T07:00:32Z","title":"FedBAP: Backdoor Defense via Benign Adversarial Perturbation in Federated Learning","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-06T14:04:59.527124Z"},"links":{"citing_paper":"/paper/2507.21177"},"observation_digest":"sha256:ac79f965fabbd00ae0204580c4e062dbae82a2c2cf1d1b4c7fa71dcc4ceac0fd","observation_id":"d4f3c940-b397-4d9b-adc0-798977df352a","resolution":{"observed_at":"2026-08-06T14:05:02.884404Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T14:05:02.872796Z","title":null,"venue":null,"work_id":"62434a9d-77b1-4fc6-a494-13ad38adb990","year":2024},"citing_paper":{"arxiv_id":"2507.21177","last_updated":"2025-07-26T07:00:32Z","snapshot_observed_at":"2026-08-06T14:04:57.093969Z","submitted_at":"2025-07-26T07:00:32Z","title":"FedBAP: Backdoor Defense via Benign Adversarial Perturbation in Federated Learning","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-06T14:04:59.590676Z"},"links":{"citing_paper":"/paper/2507.21177"},"observation_digest":"sha256:77d9f87c71690942471f20b19675e78cde9507861322ec684c4092996459fe0b","observation_id":"d6c1fd33-2d9d-495c-8dbb-6c2b544b97e0","resolution":{"observed_at":"2026-08-06T14:05:02.875732Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T14:05:02.863356Z","title":null,"venue":null,"work_id":"65a1a45c-d9d2-4d03-ae18-55e256ef3363","year":2023},"citing_paper":{"arxiv_id":"2507.21177","last_updated":"2025-07-26T07:00:32Z","snapshot_observed_at":"2026-08-06T14:04:57.093969Z","submitted_at":"2025-07-26T07:00:32Z","title":"FedBAP: Backdoor Defense via Benign Adversarial Perturbation in Federated Learning","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-06T14:04:59.689737Z"},"links":{"citing_paper":"/paper/2507.21177"},"observation_digest":"sha256:93056e22e280f8401d50a2fa0a890c9f1e428a4ccf056d685bb0f6121e7ccc68","observation_id":"c06752d3-7087-49c7-890a-804ebf9898cd","resolution":{"observed_at":"2026-08-06T14:05:02.866466Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2405.03299","last_updated":"2024-05-06T09:21:15Z","snapshot_observed_at":"2026-07-06T18:10:16.760984Z","submitted_at":"2024-05-06T09:21:15Z","title":"DarkFed: A Data-Free Backdoor Attack in Federated Learning","version":1},"cited_work":{"arxiv_id":"2405.03299","doi":null,"metadata_source":"pith","pith_arxiv_id":"2405.03299","snapshot_observed_at":"2026-08-06T14:05:02.579434Z","title":"DarkFed: A Data-Free Backdoor Attack in Federated Learning","venue":"cs.CR","work_id":"9e2b1b00-ec35-4fb9-8ec0-d758c36fe5e3","year":2024},"citing_paper":{"arxiv_id":"2507.21177","last_updated":"2025-07-26T07:00:32Z","snapshot_observed_at":"2026-08-06T14:04:57.093969Z","submitted_at":"2025-07-26T07:00:32Z","title":"FedBAP: Backdoor Defense via Benign Adversarial Perturbation in Federated Learning","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-06T14:04:59.762596Z"},"links":{"cited_paper":"/paper/2405.03299","citing_paper":"/paper/2507.21177"},"observation_digest":"sha256:e550da9352c9c1581da36a962fc03a5eae63a91e1785bab58980c7765824fe9e","observation_id":"cf9bd433-230e-4549-ba74-dd007d14d748","resolution":{"observed_at":"2026-08-06T14:05:02.583200Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T14:05:02.854525Z","title":null,"venue":null,"work_id":"3618c590-14fc-45f5-a7f2-91d6e781da3d","year":2024},"citing_paper":{"arxiv_id":"2507.21177","last_updated":"2025-07-26T07:00:32Z","snapshot_observed_at":"2026-08-06T14:04:57.093969Z","submitted_at":"2025-07-26T07:00:32Z","title":"FedBAP: Backdoor Defense via Benign Adversarial Perturbation in Federated Learning","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-06T14:04:59.796285Z"},"links":{"citing_paper":"/paper/2507.21177"},"observation_digest":"sha256:691059e13b6f2e936a5f0997964bf5dc5bbd4ef266341f9f52347b74d3ff7171","observation_id":"05617f8a-6d84-4aec-a84f-dd6572c20899","resolution":{"observed_at":"2026-08-06T14:05:02.857294Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T14:05:02.845278Z","title":null,"venue":null,"work_id":"5a5574a4-e306-403f-a7d4-295246cdae6a","year":2024},"citing_paper":{"arxiv_id":"2507.21177","last_updated":"2025-07-26T07:00:32Z","snapshot_observed_at":"2026-08-06T14:04:57.093969Z","submitted_at":"2025-07-26T07:00:32Z","title":"FedBAP: Backdoor Defense via Benign Adversarial Perturbation in Federated Learning","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-06T14:04:59.870038Z"},"links":{"citing_paper":"/paper/2507.21177"},"observation_digest":"sha256:66fc85baeb0e94e041c603822f0b00134613fcc34b8394648fd050d6ba972de9","observation_id":"75eec137-66a3-4b2d-aab8-a98fe75d2ba7","resolution":{"observed_at":"2026-08-06T14:05:02.848394Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T14:05:02.836708Z","title":null,"venue":null,"work_id":"582779ad-ecfa-43e2-97f2-6b802c616d00","year":2023},"citing_paper":{"arxiv_id":"2507.21177","last_updated":"2025-07-26T07:00:32Z","snapshot_observed_at":"2026-08-06T14:04:57.093969Z","submitted_at":"2025-07-26T07:00:32Z","title":"FedBAP: Backdoor Defense via Benign Adversarial Perturbation in Federated Learning","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-06T14:04:59.916841Z"},"links":{"citing_paper":"/paper/2507.21177"},"observation_digest":"sha256:7f0a86b8b955cd4d8eb025fce70be0215748dcb561b8e0d8c2b22c11e7c522c5","observation_id":"0f12b34c-b253-4daa-a0a7-62c7ad285716","resolution":{"observed_at":"2026-08-06T14:05:02.839568Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T14:05:02.827761Z","title":null,"venue":null,"work_id":"d27b272d-9139-4ea3-9e21-82bfb64b1bea","year":2024},"citing_paper":{"arxiv_id":"2507.21177","last_updated":"2025-07-26T07:00:32Z","snapshot_observed_at":"2026-08-06T14:04:57.093969Z","submitted_at":"2025-07-26T07:00:32Z","title":"FedBAP: Backdoor Defense via Benign Adversarial Perturbation in Federated Learning","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-06T14:05:00.019360Z"},"links":{"citing_paper":"/paper/2507.21177"},"observation_digest":"sha256:e963aa790d203ebb7548be057316e3631e7a40d264f074c9b98b0672fd2f0fba","observation_id":"acee67fc-b88d-4bc4-9304-ada4fd058235","resolution":{"observed_at":"2026-08-06T14:05:02.830688Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T14:05:02.819248Z","title":null,"venue":null,"work_id":"68c6fa6d-b407-4c50-90d5-b47405648ef8","year":2017},"citing_paper":{"arxiv_id":"2507.21177","last_updated":"2025-07-26T07:00:32Z","snapshot_observed_at":"2026-08-06T14:04:57.093969Z","submitted_at":"2025-07-26T07:00:32Z","title":"FedBAP: Backdoor Defense via Benign Adversarial Perturbation in Federated Learning","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-06T14:05:00.107183Z"},"links":{"citing_paper":"/paper/2507.21177"},"observation_digest":"sha256:612122862113a37cf07ca63f4af52007cb8e6c3d78c3821c9262963315ca6994","observation_id":"7339536b-df8a-429c-9ebb-f986e7d53d09","resolution":{"observed_at":"2026-08-06T14:05:02.822007Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T14:05:02.810438Z","title":null,"venue":null,"work_id":"7e50559a-235d-4b13-9935-0deaca4ece81","year":2019},"citing_paper":{"arxiv_id":"2507.21177","last_updated":"2025-07-26T07:00:32Z","snapshot_observed_at":"2026-08-06T14:04:57.093969Z","submitted_at":"2025-07-26T07:00:32Z","title":"FedBAP: Backdoor Defense via Benign Adversarial Perturbation in Federated Learning","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-06T14:05:00.182436Z"},"links":{"citing_paper":"/paper/2507.21177"},"observation_digest":"sha256:a8fe3edb7011ce3d30f2a210a1a8e3cb6d946862922a77a7b8e068b306713c91","observation_id":"4573907c-68b0-44b7-99b6-90fc3f2a559c","resolution":{"observed_at":"2026-08-06T14:05:02.813355Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T14:05:02.800894Z","title":null,"venue":null,"work_id":"cc531a1d-4bcc-40fd-936d-1bdabf51081d","year":2023},"citing_paper":{"arxiv_id":"2507.21177","last_updated":"2025-07-26T07:00:32Z","snapshot_observed_at":"2026-08-06T14:04:57.093969Z","submitted_at":"2025-07-26T07:00:32Z","title":"FedBAP: Backdoor Defense via Benign Adversarial Perturbation in Federated Learning","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-06T14:05:00.249101Z"},"links":{"citing_paper":"/paper/2507.21177"},"observation_digest":"sha256:543bfacd55106f7daf53ff3436e4fffad6892f86487b8d6ef6510083e26387be","observation_id":"4f45208b-c0a8-448a-9c07-9a923d191f6a","resolution":{"observed_at":"2026-08-06T14:05:02.804103Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T14:05:02.791227Z","title":null,"venue":null,"work_id":"7645527a-ec6e-45d1-a896-1a9b1d75e0fe","year":2022},"citing_paper":{"arxiv_id":"2507.21177","last_updated":"2025-07-26T07:00:32Z","snapshot_observed_at":"2026-08-06T14:04:57.093969Z","submitted_at":"2025-07-26T07:00:32Z","title":"FedBAP: Backdoor Defense via Benign Adversarial Perturbation in Federated Learning","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-06T14:05:00.318193Z"},"links":{"citing_paper":"/paper/2507.21177"},"observation_digest":"sha256:fa6192d8251e8e08e9e6f3e58d6ed21b219139fb3af671721a5a1d721604ff3e","observation_id":"9a5b8586-62b1-443e-b025-977bbb59e26e","resolution":{"observed_at":"2026-08-06T14:05:02.794187Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T14:05:02.781608Z","title":null,"venue":null,"work_id":"2ba8606f-cd9e-4dc8-b942-9ea8e0c34816","year":2021},"citing_paper":{"arxiv_id":"2507.21177","last_updated":"2025-07-26T07:00:32Z","snapshot_observed_at":"2026-08-06T14:04:57.093969Z","submitted_at":"2025-07-26T07:00:32Z","title":"FedBAP: Backdoor Defense via Benign Adversarial Perturbation in Federated Learning","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-06T14:05:00.331553Z"},"links":{"citing_paper":"/paper/2507.21177"},"observation_digest":"sha256:ddd5377157f7de2159512d2cf147a9b9d4234beb2efdc17f7a2482367ee38280","observation_id":"367c215e-715d-4d78-92cc-7d5733c038bd","resolution":{"observed_at":"2026-08-06T14:05:02.784598Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T14:05:02.771387Z","title":null,"venue":null,"work_id":"d2f3fe1a-519a-4ebb-93d3-7c7e74308412","year":2024},"citing_paper":{"arxiv_id":"2507.21177","last_updated":"2025-07-26T07:00:32Z","snapshot_observed_at":"2026-08-06T14:04:57.093969Z","submitted_at":"2025-07-26T07:00:32Z","title":"FedBAP: Backdoor Defense via Benign Adversarial Perturbation in Federated Learning","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-06T14:05:00.428596Z"},"links":{"citing_paper":"/paper/2507.21177"},"observation_digest":"sha256:599dbe3fb93a24d5a8e062860c9fe149e94593e8d37929e81bf41676f83ba16c","observation_id":"9e69ee8d-b0c7-4ae2-848b-8aa2df5db55a","resolution":{"observed_at":"2026-08-06T14:05:02.774756Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2210.07714","last_updated":"2023-08-22T10:26:00Z","snapshot_observed_at":"2026-08-06T12:40:47.935851Z","submitted_at":"2022-10-14T11:27:49Z","title":"CrowdGuard: Federated Backdoor Detection in Federated Learning","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2210.07714","snapshot_observed_at":"2026-08-06T14:05:00.552631Z","title":null,"venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2507.21177","last_updated":"2025-07-26T07:00:32Z","snapshot_observed_at":"2026-08-06T14:04:57.093969Z","submitted_at":"2025-07-26T07:00:32Z","title":"FedBAP: Backdoor Defense via Benign Adversarial Perturbation in Federated Learning","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-06T14:05:00.552631Z"},"links":{"cited_paper":"/paper/2210.07714","citing_paper":"/paper/2507.21177"},"observation_digest":"sha256:313fe8f422a672856f7a29558267c8854a817ce5674d4f1b3286a18bff2a14fb","observation_id":"32614150-ce03-4027-96ed-28e9b185c241","resolution":{"observed_at":"2026-08-06T14:05:00.552631Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T14:05:02.761365Z","title":null,"venue":null,"work_id":"735af238-b3aa-4917-ab3d-6872f6ebf6f2","year":2018},"citing_paper":{"arxiv_id":"2507.21177","last_updated":"2025-07-26T07:00:32Z","snapshot_observed_at":"2026-08-06T14:04:57.093969Z","submitted_at":"2025-07-26T07:00:32Z","title":"FedBAP: Backdoor Defense via Benign Adversarial Perturbation in Federated Learning","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-06T14:05:00.773968Z"},"links":{"citing_paper":"/paper/2507.21177"},"observation_digest":"sha256:e2b668c37b9c75a070645a0791e390fb3ccec3a30e29a1047eb5466255f26425","observation_id":"8cb0b337-7e99-45fc-a3ca-c5116bf9a152","resolution":{"observed_at":"2026-08-06T14:05:02.764514Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T14:05:02.752018Z","title":null,"venue":null,"work_id":"4f4c8c74-f28d-41ee-aa18-c3d4ac8018fb","year":2024},"citing_paper":{"arxiv_id":"2507.21177","last_updated":"2025-07-26T07:00:32Z","snapshot_observed_at":"2026-08-06T14:04:57.093969Z","submitted_at":"2025-07-26T07:00:32Z","title":"FedBAP: Backdoor Defense via Benign Adversarial Perturbation in Federated Learning","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-06T14:05:00.909160Z"},"links":{"citing_paper":"/paper/2507.21177"},"observation_digest":"sha256:5450e649158827391275c2acf6487fe49da453a0275fe16bde10608db466a52d","observation_id":"09a9309f-4c17-4078-9d50-40006ebdc14a","resolution":{"observed_at":"2026-08-06T14:05:02.754949Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T14:05:01.033499Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2507.21177","last_updated":"2025-07-26T07:00:32Z","snapshot_observed_at":"2026-08-06T14:04:57.093969Z","submitted_at":"2025-07-26T07:00:32Z","title":"FedBAP: Backdoor Defense via Benign Adversarial Perturbation in Federated Learning","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-06T14:05:01.033499Z"},"links":{"citing_paper":"/paper/2507.21177"},"observation_digest":"sha256:58ab615cac351ef73c6b9a8c74342355f60c5f266aaf30e437dd29d7d0c620f1","observation_id":"0ea25543-a724-4c5d-990a-09b0ba8eb344","resolution":{"observed_at":"2026-08-06T14:05:01.033499Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T14:05:02.736096Z","title":null,"venue":null,"work_id":"84db889d-d7fc-4f71-8dab-90713dc5e7bb","year":2020},"citing_paper":{"arxiv_id":"2507.21177","last_updated":"2025-07-26T07:00:32Z","snapshot_observed_at":"2026-08-06T14:04:57.093969Z","submitted_at":"2025-07-26T07:00:32Z","title":"FedBAP: Backdoor Defense via Benign Adversarial Perturbation in Federated Learning","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-06T14:05:01.303678Z"},"links":{"citing_paper":"/paper/2507.21177"},"observation_digest":"sha256:85d96ac86d0b319402719d90fcf8574a5abce6eeea53f8436ac76a3a3aec72d3","observation_id":"109b2135-adbf-4d2e-8b9e-9f38f70882eb","resolution":{"observed_at":"2026-08-06T14:05:02.739985Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T14:05:02.726677Z","title":null,"venue":null,"work_id":"4bdf123d-8a58-4e7e-8c07-8f126fc79464","year":2023},"citing_paper":{"arxiv_id":"2507.21177","last_updated":"2025-07-26T07:00:32Z","snapshot_observed_at":"2026-08-06T14:04:57.093969Z","submitted_at":"2025-07-26T07:00:32Z","title":"FedBAP: Backdoor Defense via Benign Adversarial Perturbation in Federated Learning","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-06T14:05:01.430561Z"},"links":{"citing_paper":"/paper/2507.21177"},"observation_digest":"sha256:6267061a6a9bc890891f13ac4632fb100eb92a3028f85dc1e47e5193cf566508","observation_id":"f780f52d-b3c4-4130-bf8e-18db18560bb2","resolution":{"observed_at":"2026-08-06T14:05:02.729767Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T14:05:02.717267Z","title":null,"venue":null,"work_id":"3bd37d86-f4e0-4560-9975-abae07a03b26","year":2019},"citing_paper":{"arxiv_id":"2507.21177","last_updated":"2025-07-26T07:00:32Z","snapshot_observed_at":"2026-08-06T14:04:57.093969Z","submitted_at":"2025-07-26T07:00:32Z","title":"FedBAP: Backdoor Defense via Benign Adversarial Perturbation in Federated Learning","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-06T14:05:01.494760Z"},"links":{"citing_paper":"/paper/2507.21177"},"observation_digest":"sha256:3436985e666dc8cf20dcaf4f99b9d84ddcc3c83d634d663bc79e1b9eb1ec4ba1","observation_id":"89906b40-5036-432b-8ec3-f23a22988230","resolution":{"observed_at":"2026-08-06T14:05:02.720465Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T14:05:01.575432Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2507.21177","last_updated":"2025-07-26T07:00:32Z","snapshot_observed_at":"2026-08-06T14:04:57.093969Z","submitted_at":"2025-07-26T07:00:32Z","title":"FedBAP: Backdoor Defense via Benign Adversarial Perturbation in Federated Learning","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-06T14:05:01.575432Z"},"links":{"citing_paper":"/paper/2507.21177"},"observation_digest":"sha256:fb19076dcb687268a75b6bf66d5190b5131c5f3ace3709a1f04fffdfe9be2863","observation_id":"1b9ea602-8063-4f7b-8091-1adc1c7f488d","resolution":{"observed_at":"2026-08-06T14:05:01.575432Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T14:05:02.691994Z","title":null,"venue":null,"work_id":"5358df6a-b34c-40c4-99b4-2e6167e28305","year":2019},"citing_paper":{"arxiv_id":"2507.21177","last_updated":"2025-07-26T07:00:32Z","snapshot_observed_at":"2026-08-06T14:04:57.093969Z","submitted_at":"2025-07-26T07:00:32Z","title":"FedBAP: Backdoor Defense via Benign Adversarial Perturbation in Federated Learning","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-06T14:05:01.837394Z"},"links":{"citing_paper":"/paper/2507.21177"},"observation_digest":"sha256:35d3695b529df7aeee267696b1c6566b4e634ea22148c5ddcbc90f64eb6dd26b","observation_id":"78526327-dd6c-4684-bd64-d718190a3f1b","resolution":{"observed_at":"2026-08-06T14:05:02.695040Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T14:05:02.682542Z","title":null,"venue":null,"work_id":"bd954e54-2c2b-47bd-8542-78d585190684","year":2024},"citing_paper":{"arxiv_id":"2507.21177","last_updated":"2025-07-26T07:00:32Z","snapshot_observed_at":"2026-08-06T14:04:57.093969Z","submitted_at":"2025-07-26T07:00:32Z","title":"FedBAP: Backdoor Defense via Benign Adversarial Perturbation in Federated Learning","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-06T14:05:01.971298Z"},"links":{"citing_paper":"/paper/2507.21177"},"observation_digest":"sha256:9a2993c4383e308c3cfaec7ede7b350cc3efe7493fde6831f372c2400b9ffeed","observation_id":"fc223c18-4c06-4e10-8a98-28044f3747f5","resolution":{"observed_at":"2026-08-06T14:05:02.685548Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T14:05:02.671220Z","title":null,"venue":null,"work_id":"eeaf63e9-5aed-4108-8089-c4c29d32a64e","year":2023},"citing_paper":{"arxiv_id":"2507.21177","last_updated":"2025-07-26T07:00:32Z","snapshot_observed_at":"2026-08-06T14:04:57.093969Z","submitted_at":"2025-07-26T07:00:32Z","title":"FedBAP: Backdoor Defense via Benign Adversarial Perturbation in Federated Learning","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-06T14:05:02.115326Z"},"links":{"citing_paper":"/paper/2507.21177"},"observation_digest":"sha256:298e0109dda22e3f61e671678b4840d961b10e7a09619f73933e898340b9aeef","observation_id":"d7ad780a-2a99-45ea-b6a6-5b594bcae2ad","resolution":{"observed_at":"2026-08-06T14:05:02.675150Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2210.12873","last_updated":"2023-02-27T19:30:01Z","snapshot_observed_at":"2026-07-06T14:09:20.919933Z","submitted_at":"2022-10-23T22:24:03Z","title":"FLIP: A Provable Defense Framework for Backdoor Mitigation in Federated Learning","version":2},"cited_work":{"arxiv_id":"2210.12873","doi":null,"metadata_source":"pith","pith_arxiv_id":"2210.12873","snapshot_observed_at":"2026-08-06T14:05:02.363732Z","title":"FLIP: A Provable Defense Framework for Backdoor Mitigation in Federated Learning","venue":"cs.CR","work_id":"d6a2e457-554b-4c78-bf61-e2a202c0676c","year":2022},"citing_paper":{"arxiv_id":"2507.21177","last_updated":"2025-07-26T07:00:32Z","snapshot_observed_at":"2026-08-06T14:04:57.093969Z","submitted_at":"2025-07-26T07:00:32Z","title":"FedBAP: Backdoor Defense via Benign Adversarial Perturbation in Federated Learning","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-06T14:05:02.257773Z"},"links":{"cited_paper":"/paper/2210.12873","citing_paper":"/paper/2507.21177"},"observation_digest":"sha256:88a7f06123cc9ce9d463be4caae0b4909676c5912b147748651d4d25b99cea28","observation_id":"dfa2fbd0-351d-47cb-a99d-90dc08d5a036","resolution":{"observed_at":"2026-08-06T14:05:02.466153Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T14:05:02.660170Z","title":null,"venue":null,"work_id":"0f58bc52-4f4e-48f6-b2c5-2f31e6868419","year":2022},"citing_paper":{"arxiv_id":"2507.21177","last_updated":"2025-07-26T07:00:32Z","snapshot_observed_at":"2026-08-06T14:04:57.093969Z","submitted_at":"2025-07-26T07:00:32Z","title":"FedBAP: Backdoor Defense via Benign Adversarial Perturbation in Federated Learning","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-06T14:05:02.301644Z"},"links":{"citing_paper":"/paper/2507.21177"},"observation_digest":"sha256:c5e46114a07fc18e9c951782eabac4abcef5492c901f39f7253fa39bbf60de22","observation_id":"559a3d8a-62f3-4714-a6a4-e1be1e08a4dd","resolution":{"observed_at":"2026-08-06T14:05:02.663474Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T14:05:02.650019Z","title":null,"venue":null,"work_id":"9b24a0e0-fbf4-42a6-a439-f77901ae895f","year":2022},"citing_paper":{"arxiv_id":"2507.21177","last_updated":"2025-07-26T07:00:32Z","snapshot_observed_at":"2026-08-06T14:04:57.093969Z","submitted_at":"2025-07-26T07:00:32Z","title":"FedBAP: Backdoor Defense via Benign Adversarial Perturbation in Federated Learning","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-06T14:05:02.304874Z"},"links":{"citing_paper":"/paper/2507.21177"},"observation_digest":"sha256:cd088a30fa8e77b9f056d5199bcbe21dedd07cc408f8fbb799f2d3d75a2ee6c8","observation_id":"4ec4f08a-6b73-4270-b550-980a437ba5fc","resolution":{"observed_at":"2026-08-06T14:05:02.652934Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T14:05:02.640343Z","title":null,"venue":null,"work_id":"0c1f16f3-79d4-4eee-8f93-c1d8f13aca2a","year":2025},"citing_paper":{"arxiv_id":"2507.21177","last_updated":"2025-07-26T07:00:32Z","snapshot_observed_at":"2026-08-06T14:04:57.093969Z","submitted_at":"2025-07-26T07:00:32Z","title":"FedBAP: Backdoor Defense via Benign Adversarial Perturbation in Federated Learning","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-06T14:05:02.308125Z"},"links":{"citing_paper":"/paper/2507.21177"},"observation_digest":"sha256:ade3edbc0ab3cc91dbf8f5ad91ea5759f6fb27cc2eb4901a20fec72142151ff4","observation_id":"732c21f9-63c6-4d8b-8f34-9c680078628c","resolution":{"observed_at":"2026-08-06T14:05:02.643448Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T14:05:02.630703Z","title":null,"venue":null,"work_id":"99c95cfb-15b9-461d-89f3-6a53d35147da","year":2023},"citing_paper":{"arxiv_id":"2507.21177","last_updated":"2025-07-26T07:00:32Z","snapshot_observed_at":"2026-08-06T14:04:57.093969Z","submitted_at":"2025-07-26T07:00:32Z","title":"FedBAP: Backdoor Defense via Benign Adversarial Perturbation in Federated Learning","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-06T14:05:02.311980Z"},"links":{"citing_paper":"/paper/2507.21177"},"observation_digest":"sha256:b870a9e77f25acc1bfba03fe46bede4e0326ac9dddfbfe189b4b297924231d56","observation_id":"51be2f5d-bd63-420f-a863-0fcb406f2c30","resolution":{"observed_at":"2026-08-06T14:05:02.633638Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T14:05:02.621747Z","title":null,"venue":null,"work_id":"56aa64cb-86b8-4d87-b419-39d2a31061da","year":2023},"citing_paper":{"arxiv_id":"2507.21177","last_updated":"2025-07-26T07:00:32Z","snapshot_observed_at":"2026-08-06T14:04:57.093969Z","submitted_at":"2025-07-26T07:00:32Z","title":"FedBAP: Backdoor Defense via Benign Adversarial Perturbation in Federated Learning","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-06T14:05:02.315509Z"},"links":{"citing_paper":"/paper/2507.21177"},"observation_digest":"sha256:d2890ba1ddb490cd926262d08e66326a2297161bef0d84a3f35874117a574654","observation_id":"f7670d89-2c26-4387-af64-ca9b7a0073be","resolution":{"observed_at":"2026-08-06T14:05:02.624546Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2308.04466","last_updated":"2024-04-15T15:52:41Z","snapshot_observed_at":"2026-07-06T16:04:02.943124Z","submitted_at":"2023-08-08T05:46:47Z","title":"Backdoor Federated Learning by Poisoning Backdoor-Critical Layers","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2308.04466","snapshot_observed_at":"2026-08-06T14:05:02.319374Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.21177","last_updated":"2025-07-26T07:00:32Z","snapshot_observed_at":"2026-08-06T14:04:57.093969Z","submitted_at":"2025-07-26T07:00:32Z","title":"FedBAP: Backdoor Defense via Benign Adversarial Perturbation in Federated Learning","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-06T14:05:02.319374Z"},"links":{"cited_paper":"/paper/2308.04466","citing_paper":"/paper/2507.21177"},"observation_digest":"sha256:91d0dfda6cc036d44937ebdbdc011c545598a5de40d0a5e64b4ee4665d31a911","observation_id":"fbb7f0b8-aa73-448d-a832-89138ad2a6c7","resolution":{"observed_at":"2026-08-06T14:05:02.319374Z","resolver_source":null,"status":"malformed_identifier"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T14:05:02.942226Z","title":"Advances in Neural Information Processing Systems 30 (2017)","venue":null,"work_id":"6acf51c7-a2fe-4a99-b9c6-913d6fb7e411","year":2017},"citing_paper":{"arxiv_id":"2507.21177","last_updated":"2025-07-26T07:00:32Z","snapshot_observed_at":"2026-08-06T14:04:57.093969Z","submitted_at":"2025-07-26T07:00:32Z","title":"FedBAP: Backdoor Defense via Benign Adversarial Perturbation in Federated Learning","version":1},"reference_index":2017,"source":"pdf_text","source_observed_at":"2026-08-06T14:04:58.771743Z"},"links":{"citing_paper":"/paper/2507.21177"},"observation_digest":"sha256:da654b43ef60b58720389c9940d4aa33be54bbe2b275418b5d492f297a244690","observation_id":"a4b255e4-77eb-44ca-ac7d-ebef123f2248","resolution":{"observed_at":"2026-08-06T14:05:02.945255Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1911.07963","last_updated":"2019-12-02T19:00:11Z","snapshot_observed_at":"2026-08-06T20:09:23.048652Z","submitted_at":"2019-11-18T21:25:03Z","title":"Can You Really Backdoor Federated Learning?","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1911.07963","snapshot_observed_at":"2026-08-06T14:05:01.129906Z","title":null,"venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2507.21177","last_updated":"2025-07-26T07:00:32Z","snapshot_observed_at":"2026-08-06T14:04:57.093969Z","submitted_at":"2025-07-26T07:00:32Z","title":"FedBAP: Backdoor Defense via Benign Adversarial Perturbation in Federated Learning","version":1},"reference_index":2019,"source":"pdf_text","source_observed_at":"2026-08-06T14:05:01.129906Z"},"links":{"cited_paper":"/paper/1911.07963","citing_paper":"/paper/2507.21177"},"observation_digest":"sha256:9712092bbd1d5ac33caf1fe9a6c095f4315dbafa6c7c3f197d9702fcefae61ea","observation_id":"6f26540f-0dba-40e7-bc56-75dfe1b39f85","resolution":{"observed_at":"2026-08-06T14:05:01.129906Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T14:05:02.701118Z","title":"In Proceedings of the 2022 ACM on Asia Conference on Computer and Communications Security","venue":null,"work_id":"1a4c1b5f-fc32-4a3b-ad7b-2d68879e595d","year":2022},"citing_paper":{"arxiv_id":"2507.21177","last_updated":"2025-07-26T07:00:32Z","snapshot_observed_at":"2026-08-06T14:04:57.093969Z","submitted_at":"2025-07-26T07:00:32Z","title":"FedBAP: Backdoor Defense via Benign Adversarial Perturbation in Federated Learning","version":1},"reference_index":2022,"source":"pdf_text","source_observed_at":"2026-08-06T14:05:01.687265Z"},"links":{"citing_paper":"/paper/2507.21177"},"observation_digest":"sha256:48d28270fb58e65cdfc797bd5cad693a757d11b64e55743d6be8d8b979556820","observation_id":"65a98601-edfb-43f2-b40f-e52229c1e021","resolution":{"observed_at":"2026-08-06T14:05:02.704210Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2507.21177","last_updated":"2025-07-26T07:00:32Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-06T14:04:57.093969Z","submitted_at":"2025-07-26T07:00:32Z","title":"FedBAP: Backdoor Defense via Benign Adversarial Perturbation in Federated Learning"},"reference_resolution":{"displayed":46,"state_counts":{"malformed_identifier":1,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":41,"verified_exact":2,"verified_fuzzy":2},"total_outbound_references":46},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"thesis":"As of 7 August 2026, this Paper Citation Record lists 46 of 46 outbound references and 0 inbound Pith citation observations for arXiv:2507.21177."}