{"as_of":"2026-08-08T00:15:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:4295783f32ce6368c69ca0a65997bb385b8c75b149962f7b1143d806af0ae481","coverage":[{"denominator":83,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":83,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-06T11:19:32.823544Z","state":"measured"},{"denominator":83,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":83,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-07T06:34:17.273281+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2507.22813/citation-record","integrity":"/paper/2507.22813/integrity","json":"/paper/2507.22813/citation-record.json","paper":"/paper/2507.22813"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2019.29090","doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T11:19:36.550165Z","title":"Bad- nets: Evaluating backdooring attacks on deep neural net- works","venue":null,"work_id":"bfca5634-eec3-45be-95ec-ea246d198213","year":2019},"citing_paper":{"arxiv_id":"2507.22813","last_updated":"2025-07-30T16:31:13Z","snapshot_observed_at":"2026-08-06T11:19:23.817467Z","submitted_at":"2025-07-30T16:31:13Z","title":"DISTIL: Data-Free Inversion of Suspicious Trojan Inputs via Latent Diffusion","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-06T11:19:24.831188Z"},"links":{"citing_paper":"/paper/2507.22813"},"observation_digest":"sha256:aa240610a6cda438a66331bdbeedaa414997b56deb887614ddc96bcc157f6706","observation_id":"b599db4b-a88b-4b9a-b70c-d3ec1d08d44d","resolution":{"observed_at":"2026-08-06T11:19:36.671200Z","resolver_source":"raw_fallback","status":"malformed_identifier"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1712.05526","last_updated":"2017-12-15T04:26:26Z","snapshot_observed_at":"2026-07-06T06:14:30.795326Z","submitted_at":"2017-12-15T04:26:26Z","title":"Targeted Backdoor Attacks on Deep Learning Systems Using Data Poisoning","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1712.05526","snapshot_observed_at":"2026-08-06T11:19:24.890880Z","title":"Targeted backdoor attacks on deep learning systems using data poisoning","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2507.22813","last_updated":"2025-07-30T16:31:13Z","snapshot_observed_at":"2026-08-06T11:19:23.817467Z","submitted_at":"2025-07-30T16:31:13Z","title":"DISTIL: Data-Free Inversion of Suspicious Trojan Inputs via Latent Diffusion","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-06T11:19:24.890880Z"},"links":{"cited_paper":"/paper/1712.05526","citing_paper":"/paper/2507.22813"},"observation_digest":"sha256:f8e5f36178d764c6caa99cb625671d79c6e289435f3b478aac8a805312eb7170","observation_id":"cf0c174e-f53b-4284-8182-d67c1b11bb44","resolution":{"observed_at":"2026-08-06T11:19:24.890880Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T11:19:24.973154Z","title":"A new backdoor attack in cnns by training set corruption without label poisoning","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2507.22813","last_updated":"2025-07-30T16:31:13Z","snapshot_observed_at":"2026-08-06T11:19:23.817467Z","submitted_at":"2025-07-30T16:31:13Z","title":"DISTIL: Data-Free Inversion of Suspicious Trojan Inputs via Latent Diffusion","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-06T11:19:24.973154Z"},"links":{"citing_paper":"/paper/2507.22813"},"observation_digest":"sha256:fe0d92155ad536055a73a09622ea7add438d2f1fef368e7387b3e6344a765ede","observation_id":"6ebcf520-8699-4fbe-925d-60464aa914f7","resolution":{"observed_at":"2026-08-06T11:19:24.973154Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T11:19:25.070209Z","title":"Input-aware dynamic backdoor attack","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2507.22813","last_updated":"2025-07-30T16:31:13Z","snapshot_observed_at":"2026-08-06T11:19:23.817467Z","submitted_at":"2025-07-30T16:31:13Z","title":"DISTIL: Data-Free Inversion of Suspicious Trojan Inputs via Latent Diffusion","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-06T11:19:25.070209Z"},"links":{"citing_paper":"/paper/2507.22813"},"observation_digest":"sha256:077199d6bce5741e0a35d3964c00b58ef4a762dc09f3bf10103a269bcb8a3006","observation_id":"6d05e8c5-03ce-430f-a96c-b80d876e581f","resolution":{"observed_at":"2026-08-06T11:19:25.070209Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T11:19:25.149072Z","title":"Wanet - impercep- tible warping-based backdoor attack","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2507.22813","last_updated":"2025-07-30T16:31:13Z","snapshot_observed_at":"2026-08-06T11:19:23.817467Z","submitted_at":"2025-07-30T16:31:13Z","title":"DISTIL: Data-Free Inversion of Suspicious Trojan Inputs via Latent Diffusion","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-06T11:19:25.149072Z"},"links":{"citing_paper":"/paper/2507.22813"},"observation_digest":"sha256:2ed6ae3981a85ad72f6d3c147721e396f288d111c007a644eb9253b89bb2b3d8","observation_id":"c374dd6d-8b0f-4407-ae75-53fab30d318d","resolution":{"observed_at":"2026-08-06T11:19:25.149072Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T11:19:46.663367Z","title":"Color backdoor: A robust poisoning attack in color space","venue":null,"work_id":"f5b0a39c-f742-47d1-a07f-94f5eb3e3d1f","year":2023},"citing_paper":{"arxiv_id":"2507.22813","last_updated":"2025-07-30T16:31:13Z","snapshot_observed_at":"2026-08-06T11:19:23.817467Z","submitted_at":"2025-07-30T16:31:13Z","title":"DISTIL: Data-Free Inversion of Suspicious Trojan Inputs via Latent Diffusion","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-06T11:19:25.225883Z"},"links":{"citing_paper":"/paper/2507.22813"},"observation_digest":"sha256:b7cf0f7f13ed67b171da1540a56a79e8ceedec4c537296e24aea70fa6a3d3867","observation_id":"41467d86-b509-42fb-94bc-833fae4e1709","resolution":{"observed_at":"2026-08-06T11:19:46.691384Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T11:19:46.451754Z","title":"Bppattack: Stealthy and efficient trojan attacks against deep neural net- works via image quantization and contrastive adversarial learning","venue":null,"work_id":"336a5b25-23ce-4850-8048-cc9cf62e4af8","year":2022},"citing_paper":{"arxiv_id":"2507.22813","last_updated":"2025-07-30T16:31:13Z","snapshot_observed_at":"2026-08-06T11:19:23.817467Z","submitted_at":"2025-07-30T16:31:13Z","title":"DISTIL: Data-Free Inversion of Suspicious Trojan Inputs via Latent Diffusion","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-06T11:19:25.337309Z"},"links":{"citing_paper":"/paper/2507.22813"},"observation_digest":"sha256:43ddcfbd3a7f614b4d05f798ec7cb3fb5945bf28defeaffb5824a509052be402","observation_id":"a4dcc2c2-76a7-44f6-b367-a69a49110328","resolution":{"observed_at":"2026-08-06T11:19:46.564377Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T11:19:46.166002Z","title":"Invisible backdoor attack with sample- specific triggers","venue":null,"work_id":"032e2dc5-b3c9-445e-873f-8a43c09960c9","year":null},"citing_paper":{"arxiv_id":"2507.22813","last_updated":"2025-07-30T16:31:13Z","snapshot_observed_at":"2026-08-06T11:19:23.817467Z","submitted_at":"2025-07-30T16:31:13Z","title":"DISTIL: Data-Free Inversion of Suspicious Trojan Inputs via Latent Diffusion","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-06T11:19:25.420185Z"},"links":{"citing_paper":"/paper/2507.22813"},"observation_digest":"sha256:3ba83ae7b7d8db80e82bb4eca973bc5a502e6ece0cafda4e09a16a75268e3a36","observation_id":"b17f547d-25ef-4f92-b1c6-2886e2423b01","resolution":{"observed_at":"2026-08-06T11:19:46.322179Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2007.10760","last_updated":"2020-08-02T08:38:25Z","snapshot_observed_at":"2026-07-06T09:40:34.148418Z","submitted_at":"2020-07-21T12:49:12Z","title":"Backdoor Attacks and Countermeasures on Deep Learning: A Comprehensive Review","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2007.10760","snapshot_observed_at":"2026-08-06T11:19:25.550515Z","title":"Backdoor attacks and countermeasures on deep learning: A comprehensive review","venue":null,"work_id":null,"year":2007},"citing_paper":{"arxiv_id":"2507.22813","last_updated":"2025-07-30T16:31:13Z","snapshot_observed_at":"2026-08-06T11:19:23.817467Z","submitted_at":"2025-07-30T16:31:13Z","title":"DISTIL: Data-Free Inversion of Suspicious Trojan Inputs via Latent Diffusion","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-06T11:19:25.550515Z"},"links":{"cited_paper":"/paper/2007.10760","citing_paper":"/paper/2507.22813"},"observation_digest":"sha256:f902929dfabd2cee8c00246ad14c9716edd868e7cf4937b44dc4a84a4a7e2916","observation_id":"3eacb30f-76f5-411a-a959-f408a2319d19","resolution":{"observed_at":"2026-08-06T11:19:25.550515Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T11:19:45.993346Z","title":"Hidden trigger backdoor attacks","venue":null,"work_id":"6bde621c-27db-4f14-8404-32ba1f5be4c2","year":2020},"citing_paper":{"arxiv_id":"2507.22813","last_updated":"2025-07-30T16:31:13Z","snapshot_observed_at":"2026-08-06T11:19:23.817467Z","submitted_at":"2025-07-30T16:31:13Z","title":"DISTIL: Data-Free Inversion of Suspicious Trojan Inputs via Latent Diffusion","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-06T11:19:25.651220Z"},"links":{"citing_paper":"/paper/2507.22813"},"observation_digest":"sha256:9ccc035533634fcf5034506459f7df8224d8ba995ad44cb944f814e15d722944","observation_id":"0db4956b-b9e3-4327-9d16-c7332188a06a","resolution":{"observed_at":"2026-08-06T11:19:46.066766Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2007.08745","last_updated":"2022-02-16T06:39:39Z","snapshot_observed_at":"2026-07-06T09:39:02.518657Z","submitted_at":"2020-07-17T04:09:20Z","title":"Backdoor Learning: A Survey","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2007.08745","snapshot_observed_at":"2026-08-06T11:19:25.731512Z","title":"Back- door learning: A survey, 2022","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2507.22813","last_updated":"2025-07-30T16:31:13Z","snapshot_observed_at":"2026-08-06T11:19:23.817467Z","submitted_at":"2025-07-30T16:31:13Z","title":"DISTIL: Data-Free Inversion of Suspicious Trojan Inputs via Latent Diffusion","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-06T11:19:25.731512Z"},"links":{"cited_paper":"/paper/2007.08745","citing_paper":"/paper/2507.22813"},"observation_digest":"sha256:7088876efdd9b468dd45a384a441dfe1ee32f27d162fbfe812595a88057e8789","observation_id":"fb48843b-a29e-4810-b0fc-ef0a5222ab2a","resolution":{"observed_at":"2026-08-06T11:19:25.731512Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T11:19:45.857195Z","title":"Physical backdoor attacks to lane detection systems in autonomous driving","venue":null,"work_id":"43f553c0-2629-42ee-92d7-141905bf0a1a","year":2022},"citing_paper":{"arxiv_id":"2507.22813","last_updated":"2025-07-30T16:31:13Z","snapshot_observed_at":"2026-08-06T11:19:23.817467Z","submitted_at":"2025-07-30T16:31:13Z","title":"DISTIL: Data-Free Inversion of Suspicious Trojan Inputs via Latent Diffusion","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-06T11:19:25.801274Z"},"links":{"citing_paper":"/paper/2507.22813"},"observation_digest":"sha256:d3ec1cad463c03e77d53cbab742b3d425341492f66e310ae7149283c12ef7ed0","observation_id":"a3058032-2d91-4909-adc4-03e6a417bbe9","resolution":{"observed_at":"2026-08-06T11:19:45.923687Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T11:19:45.656689Z","title":"Towards backdoor attacks against lidar object detection in autonomous driving","venue":null,"work_id":"3952e1f3-e0da-4168-9b42-5da20d530c42","year":2022},"citing_paper":{"arxiv_id":"2507.22813","last_updated":"2025-07-30T16:31:13Z","snapshot_observed_at":"2026-08-06T11:19:23.817467Z","submitted_at":"2025-07-30T16:31:13Z","title":"DISTIL: Data-Free Inversion of Suspicious Trojan Inputs via Latent Diffusion","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-06T11:19:25.908416Z"},"links":{"citing_paper":"/paper/2507.22813"},"observation_digest":"sha256:04be15845fc1770c2e69dc6382889da25f41b180bbab4dc71a30626d15cae733","observation_id":"b2fa94f8-13e4-414e-bbfe-778a35c871dc","resolution":{"observed_at":"2026-08-06T11:19:45.738155Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T11:19:45.470356Z","title":"Backdoor attacks to deep learning models and countermea- sures: A survey","venue":null,"work_id":"9b62bf81-6f3f-4685-9763-d7a44a2db050","year":2023},"citing_paper":{"arxiv_id":"2507.22813","last_updated":"2025-07-30T16:31:13Z","snapshot_observed_at":"2026-08-06T11:19:23.817467Z","submitted_at":"2025-07-30T16:31:13Z","title":"DISTIL: Data-Free Inversion of Suspicious Trojan Inputs via Latent Diffusion","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-06T11:19:25.977684Z"},"links":{"citing_paper":"/paper/2507.22813"},"observation_digest":"sha256:bb10fbf80b549ca8cb7e0cdca09b9aaf0ca65a8de4187da8ae249e2a101421e1","observation_id":"fc13596a-b27f-4d5d-8c65-eabc93b497be","resolution":{"observed_at":"2026-08-06T11:19:45.560062Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T11:19:45.254158Z","title":"A survey of recent backdoor attacks and defenses in large language models.Transactions on Machine Learning Research, 2024","venue":null,"work_id":"6583e328-8b11-4ef0-968d-efe08afe5b7e","year":2024},"citing_paper":{"arxiv_id":"2507.22813","last_updated":"2025-07-30T16:31:13Z","snapshot_observed_at":"2026-08-06T11:19:23.817467Z","submitted_at":"2025-07-30T16:31:13Z","title":"DISTIL: Data-Free Inversion of Suspicious Trojan Inputs via Latent Diffusion","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-06T11:19:26.048107Z"},"links":{"citing_paper":"/paper/2507.22813"},"observation_digest":"sha256:113b2a4a21644ba4573fad80e72c758a6b5ccd38e5e37639df67c01798d664d4","observation_id":"4476f2fc-caa4-4650-a1e3-e68a14b6370d","resolution":{"observed_at":"2026-08-06T11:19:45.372639Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T11:19:45.105491Z","title":"Anti-backdoor learning: Training clean models on poisoned data","venue":null,"work_id":"845c10ef-80ed-4ff0-88b9-cfaedc4bbc31","year":2021},"citing_paper":{"arxiv_id":"2507.22813","last_updated":"2025-07-30T16:31:13Z","snapshot_observed_at":"2026-08-06T11:19:23.817467Z","submitted_at":"2025-07-30T16:31:13Z","title":"DISTIL: Data-Free Inversion of Suspicious Trojan Inputs via Latent Diffusion","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-06T11:19:26.125139Z"},"links":{"citing_paper":"/paper/2507.22813"},"observation_digest":"sha256:cc41f9ff193f2a7cc93ca506532a64d8e8e6fedfcc2913847110bceba3a661b5","observation_id":"c62daac6-e9a8-4152-a058-556851c19283","resolution":{"observed_at":"2026-08-06T11:19:45.196908Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T11:19:44.932134Z","title":"Backdoor defense with machine unlearning","venue":null,"work_id":"d9932085-ac39-4d1c-9446-101a100fe8c4","year":2022},"citing_paper":{"arxiv_id":"2507.22813","last_updated":"2025-07-30T16:31:13Z","snapshot_observed_at":"2026-08-06T11:19:23.817467Z","submitted_at":"2025-07-30T16:31:13Z","title":"DISTIL: Data-Free Inversion of Suspicious Trojan Inputs via Latent Diffusion","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-06T11:19:26.236585Z"},"links":{"citing_paper":"/paper/2507.22813"},"observation_digest":"sha256:3699ea71e3b3b7f9555ec8db31bf4203970a5e6abab15a10b092c5866dbabd7f","observation_id":"8990d458-faf0-4f1c-8f4e-ac3bf90ccd4a","resolution":{"observed_at":"2026-08-06T11:19:45.017764Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T11:19:44.705521Z","title":"Effective backdoor defense by exploiting sensitivity of poisoned sam- ples","venue":null,"work_id":"af0c3f7a-e2e8-4220-a2a1-d0a597a81768","year":2022},"citing_paper":{"arxiv_id":"2507.22813","last_updated":"2025-07-30T16:31:13Z","snapshot_observed_at":"2026-08-06T11:19:23.817467Z","submitted_at":"2025-07-30T16:31:13Z","title":"DISTIL: Data-Free Inversion of Suspicious Trojan Inputs via Latent Diffusion","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-06T11:19:26.296957Z"},"links":{"citing_paper":"/paper/2507.22813"},"observation_digest":"sha256:d83cf3bfa04e17b955f46b32dafd694db39f57641396118c5060694a03baed04","observation_id":"bd1c7b16-928d-45f2-a8a4-bed9cbe6fb55","resolution":{"observed_at":"2026-08-06T11:19:44.793825Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2202.03423","last_updated":"2022-02-05T03:34:01Z","snapshot_observed_at":"2026-07-06T12:35:20.688158Z","submitted_at":"2022-02-05T03:34:01Z","title":"Backdoor Defense via Decoupling the Training Process","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2202.03423","snapshot_observed_at":"2026-08-06T11:19:26.346859Z","title":"Backdoor defense via decoupling the training process","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2507.22813","last_updated":"2025-07-30T16:31:13Z","snapshot_observed_at":"2026-08-06T11:19:23.817467Z","submitted_at":"2025-07-30T16:31:13Z","title":"DISTIL: Data-Free Inversion of Suspicious Trojan Inputs via Latent Diffusion","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-06T11:19:26.346859Z"},"links":{"cited_paper":"/paper/2202.03423","citing_paper":"/paper/2507.22813"},"observation_digest":"sha256:985dab73befdc8a7104e7bca39035ee34d88e5a25d4eea7dec366924cefc6f78","observation_id":"88a70275-33fb-401c-8a91-85fd2e42b227","resolution":{"observed_at":"2026-08-06T11:19:26.346859Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T11:19:44.540329Z","title":"Adversarially robust anti-backdoor learning","venue":null,"work_id":"23b2b5c0-994e-45df-a13f-4b7a20cec01d","year":2024},"citing_paper":{"arxiv_id":"2507.22813","last_updated":"2025-07-30T16:31:13Z","snapshot_observed_at":"2026-08-06T11:19:23.817467Z","submitted_at":"2025-07-30T16:31:13Z","title":"DISTIL: Data-Free Inversion of Suspicious Trojan Inputs via Latent Diffusion","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-06T11:19:26.439309Z"},"links":{"citing_paper":"/paper/2507.22813"},"observation_digest":"sha256:197d3e1cbe42b5e6408e42a97691a9c10c26e9c668d0797942d988bb691a101e","observation_id":"e40412be-b21c-453c-9a7e-918eb8268ffd","resolution":{"observed_at":"2026-08-06T11:19:44.630481Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T11:19:26.544497Z","title":null,"venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2507.22813","last_updated":"2025-07-30T16:31:13Z","snapshot_observed_at":"2026-08-06T11:19:23.817467Z","submitted_at":"2025-07-30T16:31:13Z","title":"DISTIL: Data-Free Inversion of Suspicious Trojan Inputs via Latent Diffusion","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-06T11:19:26.544497Z"},"links":{"citing_paper":"/paper/2507.22813"},"observation_digest":"sha256:01aebad28401477f554b04ab0463e8bce2bbb911947ed3b59ead1861f7db7067","observation_id":"47806fe2-d287-4240-bace-376c22720a0f","resolution":{"observed_at":"2026-08-06T11:19:26.544497Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T11:19:44.391238Z","title":"UMD: Unsupervised model detection for X2X backdoor attacks","venue":null,"work_id":"8c9d95ab-561e-4a4d-bfa1-708fa1e4171d","year":2023},"citing_paper":{"arxiv_id":"2507.22813","last_updated":"2025-07-30T16:31:13Z","snapshot_observed_at":"2026-08-06T11:19:23.817467Z","submitted_at":"2025-07-30T16:31:13Z","title":"DISTIL: Data-Free Inversion of Suspicious Trojan Inputs via Latent Diffusion","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-06T11:19:26.612731Z"},"links":{"citing_paper":"/paper/2507.22813"},"observation_digest":"sha256:b8f464d675bf41f81090f086a92c1aee5912d8ff8585bdfd1fa3ae8b72cfc797","observation_id":"aa31ac21-3b83-4a11-aecd-cc21091ed455","resolution":{"observed_at":"2026-08-06T11:19:44.470305Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T11:19:44.246695Z","title":"Neural cleanse: Identifying and mitigating backdoor attacks in neu- ral networks","venue":null,"work_id":"29f6a072-ddab-4f09-9b1a-ddc0d9d1f53a","year":2019},"citing_paper":{"arxiv_id":"2507.22813","last_updated":"2025-07-30T16:31:13Z","snapshot_observed_at":"2026-08-06T11:19:23.817467Z","submitted_at":"2025-07-30T16:31:13Z","title":"DISTIL: Data-Free Inversion of Suspicious Trojan Inputs via Latent Diffusion","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-06T11:19:26.701411Z"},"links":{"citing_paper":"/paper/2507.22813"},"observation_digest":"sha256:d3b12aa0913348b75d538fa4b2ec90756c2c57962780910b3abf6fb9903f775a","observation_id":"0180bc47-cd11-4d5f-956c-76de46fd025f","resolution":{"observed_at":"2026-08-06T11:19:44.296043Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T11:19:44.059215Z","title":"Trigger hunting with a topological prior for trojan detection","venue":null,"work_id":"548d556d-fc79-43bb-b49b-0e42bbb8957e","year":2022},"citing_paper":{"arxiv_id":"2507.22813","last_updated":"2025-07-30T16:31:13Z","snapshot_observed_at":"2026-08-06T11:19:23.817467Z","submitted_at":"2025-07-30T16:31:13Z","title":"DISTIL: Data-Free Inversion of Suspicious Trojan Inputs via Latent Diffusion","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-06T11:19:26.789079Z"},"links":{"citing_paper":"/paper/2507.22813"},"observation_digest":"sha256:48312cb9c577fc8801b4b71382600be27c6ab35d25ab4ab782b6486c9f83ba8e","observation_id":"97d43bab-818b-4cdf-a902-1ef62cceb64f","resolution":{"observed_at":"2026-08-06T11:19:44.119332Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T11:19:43.893742Z","title":"9 Backdoor scanning for deep neural networks through k- arm optimization","venue":null,"work_id":"f9dbd4a0-0260-4dd9-a1f0-88ed94b11a09","year":2021},"citing_paper":{"arxiv_id":"2507.22813","last_updated":"2025-07-30T16:31:13Z","snapshot_observed_at":"2026-08-06T11:19:23.817467Z","submitted_at":"2025-07-30T16:31:13Z","title":"DISTIL: Data-Free Inversion of Suspicious Trojan Inputs via Latent Diffusion","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-06T11:19:26.871933Z"},"links":{"citing_paper":"/paper/2507.22813"},"observation_digest":"sha256:0a572c002adfc7cc336f958e21651f8feaf476e4704d6cf7b3c49e782f1a99ba","observation_id":"ee663c55-93f1-449b-b35a-5a616c42e614","resolution":{"observed_at":"2026-08-06T11:19:43.958106Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T11:19:43.736988Z","title":"Better trigger inversion optimization in backdoor scanning","venue":null,"work_id":"60182968-3499-4581-90e7-d788a0486b3a","year":2022},"citing_paper":{"arxiv_id":"2507.22813","last_updated":"2025-07-30T16:31:13Z","snapshot_observed_at":"2026-08-06T11:19:23.817467Z","submitted_at":"2025-07-30T16:31:13Z","title":"DISTIL: Data-Free Inversion of Suspicious Trojan Inputs via Latent Diffusion","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-06T11:19:26.936530Z"},"links":{"citing_paper":"/paper/2507.22813"},"observation_digest":"sha256:62f219a45beb8584f6d5d71ff1ef29826490e2bce5262631e7bf050cdfdb0ec1","observation_id":"27c7feb1-f078-4eb7-a168-effd04f2d632","resolution":{"observed_at":"2026-08-06T11:19:43.810086Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T11:19:43.609272Z","title":"Rethinking the reverse-engineering of trojan triggers","venue":null,"work_id":"bbc94367-e7f1-4480-956a-a89b179476ae","year":2022},"citing_paper":{"arxiv_id":"2507.22813","last_updated":"2025-07-30T16:31:13Z","snapshot_observed_at":"2026-08-06T11:19:23.817467Z","submitted_at":"2025-07-30T16:31:13Z","title":"DISTIL: Data-Free Inversion of Suspicious Trojan Inputs via Latent Diffusion","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-06T11:19:27.035144Z"},"links":{"citing_paper":"/paper/2507.22813"},"observation_digest":"sha256:3e3f2815b7dd7feaa8410ad4b7d508b6e2eb387bbb99422ea8f3639290fd464c","observation_id":"a591b1ce-758e-420b-8d69-a50b1d7f8794","resolution":{"observed_at":"2026-08-06T11:19:43.670755Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2304.02786","last_updated":"2023-04-05T23:14:08Z","snapshot_observed_at":"2026-08-07T17:17:13.301916Z","submitted_at":"2023-04-05T23:14:08Z","title":"UNICORN: A Unified Backdoor Trigger Inversion Framework","version":1},"cited_work":{"arxiv_id":"2304.02786","doi":null,"metadata_source":"pith","pith_arxiv_id":"2304.02786","snapshot_observed_at":"2026-08-06T11:19:36.132118Z","title":"UNICORN: A Unified Backdoor Trigger Inversion Framework","venue":"cs.LG","work_id":"8dc890ba-7e21-4a63-b3e8-e8673109243a","year":2023},"citing_paper":{"arxiv_id":"2507.22813","last_updated":"2025-07-30T16:31:13Z","snapshot_observed_at":"2026-08-06T11:19:23.817467Z","submitted_at":"2025-07-30T16:31:13Z","title":"DISTIL: Data-Free Inversion of Suspicious Trojan Inputs via Latent Diffusion","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-06T11:19:27.096878Z"},"links":{"cited_paper":"/paper/2304.02786","citing_paper":"/paper/2507.22813"},"observation_digest":"sha256:ae00bdd327e8eacdd1d5d32db88dd42a3ac6faf9df4b31cb858f5da61fd5ab8a","observation_id":"b39d8f1b-7637-43f2-902a-a085b53ac43e","resolution":{"observed_at":"2026-08-06T11:19:36.238484Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T11:19:43.429241Z","title":"Towards reliable and efficient backdoor trigger inver- sion via decoupling benign features","venue":null,"work_id":"5b5cb85f-3807-40f5-9e48-2ab4b6941e05","year":2023},"citing_paper":{"arxiv_id":"2507.22813","last_updated":"2025-07-30T16:31:13Z","snapshot_observed_at":"2026-08-06T11:19:23.817467Z","submitted_at":"2025-07-30T16:31:13Z","title":"DISTIL: Data-Free Inversion of Suspicious Trojan Inputs via Latent Diffusion","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-06T11:19:27.169157Z"},"links":{"citing_paper":"/paper/2507.22813"},"observation_digest":"sha256:671cdd4c94445f6fe1f4cf3f837bc89a090a6f4f4d5426cbd19444e9c993a61b","observation_id":"2d9208c7-ae21-4b40-aaf2-945a39ff6e46","resolution":{"observed_at":"2026-08-06T11:19:43.517128Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T11:19:43.255944Z","title":"Image synthesis with a single (robust) classifier","venue":null,"work_id":"214766d7-f370-4845-b53a-e3eed59c251a","year":2019},"citing_paper":{"arxiv_id":"2507.22813","last_updated":"2025-07-30T16:31:13Z","snapshot_observed_at":"2026-08-06T11:19:23.817467Z","submitted_at":"2025-07-30T16:31:13Z","title":"DISTIL: Data-Free Inversion of Suspicious Trojan Inputs via Latent Diffusion","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-06T11:19:27.279440Z"},"links":{"citing_paper":"/paper/2507.22813"},"observation_digest":"sha256:efa99f9f00012f4bf764bc78857ce0aeecb4c06fa67957032f5320d2c8d17731","observation_id":"843e798f-1a57-41e4-91c9-d1f4fe398c12","resolution":{"observed_at":"2026-08-06T11:19:43.333738Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T11:19:43.165514Z","title":"Single image backdoor in- version via robust smoothed classifiers","venue":null,"work_id":"453b6bd6-a9a1-4d56-9507-b01a615996e6","year":2023},"citing_paper":{"arxiv_id":"2507.22813","last_updated":"2025-07-30T16:31:13Z","snapshot_observed_at":"2026-08-06T11:19:23.817467Z","submitted_at":"2025-07-30T16:31:13Z","title":"DISTIL: Data-Free Inversion of Suspicious Trojan Inputs via Latent Diffusion","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-06T11:19:27.388487Z"},"links":{"citing_paper":"/paper/2507.22813"},"observation_digest":"sha256:208e73471fe31704a61886a01e7653586f2b4310484bc60cb719dc27bca1bd5a","observation_id":"f6ca69f9-1465-4a26-890e-d36bf13dde37","resolution":{"observed_at":"2026-08-06T11:19:43.210295Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T11:19:43.008062Z","title":"The trojan detection challenge","venue":null,"work_id":"f5be0e8f-8ef8-4ab8-be76-4b78b535412a","year":2022},"citing_paper":{"arxiv_id":"2507.22813","last_updated":"2025-07-30T16:31:13Z","snapshot_observed_at":"2026-08-06T11:19:23.817467Z","submitted_at":"2025-07-30T16:31:13Z","title":"DISTIL: Data-Free Inversion of Suspicious Trojan Inputs via Latent Diffusion","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-06T11:19:27.485759Z"},"links":{"citing_paper":"/paper/2507.22813"},"observation_digest":"sha256:e40e0a37cf0a53aeb36f66c4b2014359e03dae78b85611a048889e628f277bee","observation_id":"86909003-9e9e-4515-90e3-5569cb969446","resolution":{"observed_at":"2026-08-06T11:19:43.083410Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1312.6199","last_updated":"2014-02-19T16:33:14Z","snapshot_observed_at":"2026-07-06T03:31:33.797310Z","submitted_at":"2013-12-21T03:36:08Z","title":"Intriguing properties of neural networks","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1312.6199","snapshot_observed_at":"2026-08-06T11:19:27.591317Z","title":"Intriguing properties of neural networks","venue":null,"work_id":null,"year":2013},"citing_paper":{"arxiv_id":"2507.22813","last_updated":"2025-07-30T16:31:13Z","snapshot_observed_at":"2026-08-06T11:19:23.817467Z","submitted_at":"2025-07-30T16:31:13Z","title":"DISTIL: Data-Free Inversion of Suspicious Trojan Inputs via Latent Diffusion","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-06T11:19:27.591317Z"},"links":{"cited_paper":"/paper/1312.6199","citing_paper":"/paper/2507.22813"},"observation_digest":"sha256:64473859d1bc1d74592d955c299ab32603f35bdb6340f8b67fc715764ef2a821","observation_id":"7d6e2a0d-2925-4712-94c6-cd8238af1cbc","resolution":{"observed_at":"2026-08-06T11:19:27.591317Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2019.28908","doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T11:19:35.683382Z","title":"One pixel attack for fooling deep neural networks","venue":null,"work_id":"7d709442-7d00-4dc2-9613-29b4a5150b15","year":2019},"citing_paper":{"arxiv_id":"2507.22813","last_updated":"2025-07-30T16:31:13Z","snapshot_observed_at":"2026-08-06T11:19:23.817467Z","submitted_at":"2025-07-30T16:31:13Z","title":"DISTIL: Data-Free Inversion of Suspicious Trojan Inputs via Latent Diffusion","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-06T11:19:27.690961Z"},"links":{"citing_paper":"/paper/2507.22813"},"observation_digest":"sha256:949b0244e7349481887cfabac42ca98ed33ccf271b0eef30e2cd5d8b0081eefe","observation_id":"3c570eb6-d7dc-4d1c-81c9-cbec09a6f8c4","resolution":{"observed_at":"2026-08-06T11:19:35.880751Z","resolver_source":"raw_fallback","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T11:19:42.854437Z","title":"On the trade-off between adversarial and backdoor ro- bustness","venue":null,"work_id":"2d99c311-24de-4371-b347-5cb45e554bed","year":2020},"citing_paper":{"arxiv_id":"2507.22813","last_updated":"2025-07-30T16:31:13Z","snapshot_observed_at":"2026-08-06T11:19:23.817467Z","submitted_at":"2025-07-30T16:31:13Z","title":"DISTIL: Data-Free Inversion of Suspicious Trojan Inputs via Latent Diffusion","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-06T11:19:27.782951Z"},"links":{"citing_paper":"/paper/2507.22813"},"observation_digest":"sha256:8dfc824cb4a9e7b85c7d4bfc2a6d0dad67920ba930a2ac95edf0cffd5c1478ac","observation_id":"1cc2d8e9-1562-43e9-9282-8208a9ca8878","resolution":{"observed_at":"2026-08-06T11:19:42.912407Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T11:19:42.675326Z","title":"Towards unified robustness against both back- door and adversarial attacks","venue":null,"work_id":"1aabc643-4831-46ae-bc74-20464e719a7d","year":2024},"citing_paper":{"arxiv_id":"2507.22813","last_updated":"2025-07-30T16:31:13Z","snapshot_observed_at":"2026-08-06T11:19:23.817467Z","submitted_at":"2025-07-30T16:31:13Z","title":"DISTIL: Data-Free Inversion of Suspicious Trojan Inputs via Latent Diffusion","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-06T11:19:27.870674Z"},"links":{"citing_paper":"/paper/2507.22813"},"observation_digest":"sha256:bb7b16cfbeb6676020abf09220d0e81655da43d34ff141b7b81c05a5b5838567","observation_id":"0af083e1-7e2e-40f1-8700-78e3b423dd8e","resolution":{"observed_at":"2026-08-06T11:19:42.750314Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T11:19:42.460499Z","title":"Django: Detecting trojans in object detection models via gaussian focus calibration","venue":null,"work_id":"0d122ce9-92cc-47db-b959-7e3f451ffd59","year":2023},"citing_paper":{"arxiv_id":"2507.22813","last_updated":"2025-07-30T16:31:13Z","snapshot_observed_at":"2026-08-06T11:19:23.817467Z","submitted_at":"2025-07-30T16:31:13Z","title":"DISTIL: Data-Free Inversion of Suspicious Trojan Inputs via Latent Diffusion","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-06T11:19:27.956764Z"},"links":{"citing_paper":"/paper/2507.22813"},"observation_digest":"sha256:bb6eb2e26f60c528392d999f988adbf0b2f9fde1f72017b493502920bc8dbd63","observation_id":"21e59802-b927-4bf2-a608-7afac33ce9b7","resolution":{"observed_at":"2026-08-06T11:19:42.558429Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T11:19:28.032077Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.22813","last_updated":"2025-07-30T16:31:13Z","snapshot_observed_at":"2026-08-06T11:19:23.817467Z","submitted_at":"2025-07-30T16:31:13Z","title":"DISTIL: Data-Free Inversion of Suspicious Trojan Inputs via Latent Diffusion","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-06T11:19:28.032077Z"},"links":{"citing_paper":"/paper/2507.22813"},"observation_digest":"sha256:e55dfc9c480f435660d280e8997ba32ed65b745440d83b215f1aff66d873e066","observation_id":"d6f94b02-a5e3-4ee1-a085-c5fc858e5b05","resolution":{"observed_at":"2026-08-06T11:19:28.032077Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T11:19:35.365495Z","title":"Bet- ter trigger inversion optimization in backdoor scanning","venue":null,"work_id":"18c6421c-9303-4595-8f24-3c69efaccb3d","year":2022},"citing_paper":{"arxiv_id":"2507.22813","last_updated":"2025-07-30T16:31:13Z","snapshot_observed_at":"2026-08-06T11:19:23.817467Z","submitted_at":"2025-07-30T16:31:13Z","title":"DISTIL: Data-Free Inversion of Suspicious Trojan Inputs via Latent Diffusion","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-06T11:19:28.113197Z"},"links":{"citing_paper":"/paper/2507.22813"},"observation_digest":"sha256:22c19baaa7a4eb6a00818dd4fb72434f5bebb4f07431184e185243f42f663cf8","observation_id":"bc12ef81-3fc5-48d2-82ed-249b76a68c99","resolution":{"observed_at":"2026-08-06T11:19:35.438025Z","resolver_source":"arxiv_id_nonexistent","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2102.05123","last_updated":"2021-08-02T15:42:02Z","snapshot_observed_at":"2026-07-06T10:39:58.765690Z","submitted_at":"2021-02-09T20:49:06Z","title":"Backdoor Scanning for Deep Neural Networks through K-Arm Optimization","version":3},"cited_work":{"arxiv_id":"2102.05123","doi":null,"metadata_source":"pith","pith_arxiv_id":"2102.05123","snapshot_observed_at":"2026-08-06T11:19:35.045110Z","title":"Backdoor Scanning for Deep Neural Networks through K-Arm Optimization","venue":"cs.LG","work_id":"bce63dbe-9d1f-4d07-8a2d-4dd7896d8fad","year":2021},"citing_paper":{"arxiv_id":"2507.22813","last_updated":"2025-07-30T16:31:13Z","snapshot_observed_at":"2026-08-06T11:19:23.817467Z","submitted_at":"2025-07-30T16:31:13Z","title":"DISTIL: Data-Free Inversion of Suspicious Trojan Inputs via Latent Diffusion","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-06T11:19:28.183717Z"},"links":{"cited_paper":"/paper/2102.05123","citing_paper":"/paper/2507.22813"},"observation_digest":"sha256:ca225c5e5c0ce16abf7e09bdc9d080b4e9ea85843fe236f8929d75b9879ad4d5","observation_id":"814c8ec8-b84e-4fba-885e-85042c7bde1c","resolution":{"observed_at":"2026-08-06T11:19:35.219228Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T11:19:42.263865Z","title":"Towards reliable and efficient backdoor trigger inver- sion via decoupling benign features","venue":null,"work_id":"e135c044-2f79-4fe9-b5f0-9d019c0c83b3","year":2024},"citing_paper":{"arxiv_id":"2507.22813","last_updated":"2025-07-30T16:31:13Z","snapshot_observed_at":"2026-08-06T11:19:23.817467Z","submitted_at":"2025-07-30T16:31:13Z","title":"DISTIL: Data-Free Inversion of Suspicious Trojan Inputs via Latent Diffusion","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-06T11:19:28.248546Z"},"links":{"citing_paper":"/paper/2507.22813"},"observation_digest":"sha256:e6f3e37e06f7106719212af60c773d1b0e58fb087c5db15f40fbf422328bfeef","observation_id":"54c29972-a38f-4fc1-874b-fec0b5da036d","resolution":{"observed_at":"2026-08-06T11:19:42.361526Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T11:19:42.012015Z","title":"Model x-ray: Detecting back- doored models via decision boundary","venue":null,"work_id":"24d19c46-dabc-4217-8608-ea34e28fd781","year":2024},"citing_paper":{"arxiv_id":"2507.22813","last_updated":"2025-07-30T16:31:13Z","snapshot_observed_at":"2026-08-06T11:19:23.817467Z","submitted_at":"2025-07-30T16:31:13Z","title":"DISTIL: Data-Free Inversion of Suspicious Trojan Inputs via Latent Diffusion","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-06T11:19:28.299420Z"},"links":{"citing_paper":"/paper/2507.22813"},"observation_digest":"sha256:20e5e37e1fc19d7c9cd1a3b462f7d5f40b4fa698dd35c591c7f0f0171133d7d7","observation_id":"8cf74d97-c9ed-444a-a226-f104f9827ec6","resolution":{"observed_at":"2026-08-06T11:19:42.120425Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2305.11596","last_updated":"2023-10-20T08:10:27Z","snapshot_observed_at":"2026-07-06T15:29:39.466936Z","submitted_at":"2023-05-19T11:18:20Z","title":"Mitigating Backdoor Poisoning Attacks through the Lens of Spurious Correlation","version":2},"cited_work":{"arxiv_id":"2305.11596","doi":null,"metadata_source":"pith","pith_arxiv_id":"2305.11596","snapshot_observed_at":"2026-08-06T11:19:34.766853Z","title":"Mitigating Backdoor Poisoning Attacks through the Lens of Spurious Correlation","venue":"cs.CL","work_id":"b4563193-f813-4ecd-b012-5b0753663a09","year":2023},"citing_paper":{"arxiv_id":"2507.22813","last_updated":"2025-07-30T16:31:13Z","snapshot_observed_at":"2026-08-06T11:19:23.817467Z","submitted_at":"2025-07-30T16:31:13Z","title":"DISTIL: Data-Free Inversion of Suspicious Trojan Inputs via Latent Diffusion","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-06T11:19:28.378492Z"},"links":{"cited_paper":"/paper/2305.11596","citing_paper":"/paper/2507.22813"},"observation_digest":"sha256:15944b616cd8725ab326fcb5d98aac90b865fddb64e21147ad56b17afb76cd89","observation_id":"b00f2c82-31c7-4bee-aa65-29780624552d","resolution":{"observed_at":"2026-08-06T11:19:34.896585Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T11:19:28.470117Z","title":"Shortcuts everywhere and nowhere: Ex- ploring multi-trigger backdoor attacks, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.22813","last_updated":"2025-07-30T16:31:13Z","snapshot_observed_at":"2026-08-06T11:19:23.817467Z","submitted_at":"2025-07-30T16:31:13Z","title":"DISTIL: Data-Free Inversion of Suspicious Trojan Inputs via Latent Diffusion","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-06T11:19:28.470117Z"},"links":{"citing_paper":"/paper/2507.22813"},"observation_digest":"sha256:35662fcc5bcb642fcbf048e8ad03db83ff0cf735d6a18426c421fe981b633619","observation_id":"f91d9c50-051c-4034-b375-0c52e75d57b9","resolution":{"observed_at":"2026-08-06T11:19:28.470117Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2112.10741","last_updated":"2022-03-08T18:18:49Z","snapshot_observed_at":"2026-08-07T12:21:17.790675Z","submitted_at":"2021-12-20T18:42:55Z","title":"GLIDE: Towards Photorealistic Image Generation and Editing with Text-Guided Diffusion Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2112.10741","snapshot_observed_at":"2026-08-06T11:19:28.570615Z","title":"Glide: Towards photorealistic image generation and editing with text-guided diffusion models.arXiv preprint arXiv:2112.10741, 2021","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2507.22813","last_updated":"2025-07-30T16:31:13Z","snapshot_observed_at":"2026-08-06T11:19:23.817467Z","submitted_at":"2025-07-30T16:31:13Z","title":"DISTIL: Data-Free Inversion of Suspicious Trojan Inputs via Latent Diffusion","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-06T11:19:28.570615Z"},"links":{"cited_paper":"/paper/2112.10741","citing_paper":"/paper/2507.22813"},"observation_digest":"sha256:ab70f79942d9084ad913982d5ec1c2f331dee42364c3857b851110fa6bec6bd9","observation_id":"efdfbe2e-7d5a-463b-9dbe-c94231660f2f","resolution":{"observed_at":"2026-08-06T11:19:28.570615Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T11:19:41.824274Z","title":"Back- door learning: A survey","venue":null,"work_id":"d4cbbd75-8184-40b7-bb3e-6f58375eb8ba","year":2022},"citing_paper":{"arxiv_id":"2507.22813","last_updated":"2025-07-30T16:31:13Z","snapshot_observed_at":"2026-08-06T11:19:23.817467Z","submitted_at":"2025-07-30T16:31:13Z","title":"DISTIL: Data-Free Inversion of Suspicious Trojan Inputs via Latent Diffusion","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-06T11:19:28.669724Z"},"links":{"citing_paper":"/paper/2507.22813"},"observation_digest":"sha256:fb6903fd1092912deca6883a75f9d546e6467ed8a09464f3e34e6cda015bc9cc","observation_id":"c17c5d14-a189-459c-bbbd-668eb605945a","resolution":{"observed_at":"2026-08-06T11:19:41.895791Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T11:19:41.603294Z","title":"Diffusion models beat gans on image synthesis","venue":null,"work_id":"c3ae94e3-bcd9-4150-bc10-a5f961336a3a","year":2021},"citing_paper":{"arxiv_id":"2507.22813","last_updated":"2025-07-30T16:31:13Z","snapshot_observed_at":"2026-08-06T11:19:23.817467Z","submitted_at":"2025-07-30T16:31:13Z","title":"DISTIL: Data-Free Inversion of Suspicious Trojan Inputs via Latent Diffusion","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-06T11:19:28.741827Z"},"links":{"citing_paper":"/paper/2507.22813"},"observation_digest":"sha256:ed26c03e8caa38ebae577646a32c1b9b075475488c7961b55401ce88fac06a7f","observation_id":"86f17659-4d53-444e-aae2-73b86e5adfc3","resolution":{"observed_at":"2026-08-06T11:19:41.725344Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2011.13456","last_updated":"2021-02-10T18:17:04Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2020-11-26T19:39:10Z","title":"Score-Based Generative Modeling through Stochastic Differential Equations","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2011.13456","snapshot_observed_at":"2026-08-06T11:19:28.807770Z","title":"Score-based generative modeling through stochastic differential equa- tions","venue":null,"work_id":null,"year":2011},"citing_paper":{"arxiv_id":"2507.22813","last_updated":"2025-07-30T16:31:13Z","snapshot_observed_at":"2026-08-06T11:19:23.817467Z","submitted_at":"2025-07-30T16:31:13Z","title":"DISTIL: Data-Free Inversion of Suspicious Trojan Inputs via Latent Diffusion","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-06T11:19:28.807770Z"},"links":{"cited_paper":"/paper/2011.13456","citing_paper":"/paper/2507.22813"},"observation_digest":"sha256:0e50254dee69c53a903d796d4e1dfaf6a42381ea8282ec7d5f4dad6b31bae0f6","observation_id":"a3c67268-d0ea-42f8-9d30-34045894399d","resolution":{"observed_at":"2026-08-06T11:19:28.807770Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T11:19:41.388497Z","title":"Backdoor- bench: A comprehensive benchmark of backdoor learning","venue":null,"work_id":"95ed47b7-7f5d-46f6-9b17-4fdb95769720","year":2022},"citing_paper":{"arxiv_id":"2507.22813","last_updated":"2025-07-30T16:31:13Z","snapshot_observed_at":"2026-08-06T11:19:23.817467Z","submitted_at":"2025-07-30T16:31:13Z","title":"DISTIL: Data-Free Inversion of Suspicious Trojan Inputs via Latent Diffusion","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-06T11:19:28.916585Z"},"links":{"citing_paper":"/paper/2507.22813"},"observation_digest":"sha256:0a655188fc3bcba1c8206ed99a91f530533b2dcec85b3992232bbf34b3c1fd6c","observation_id":"ad9140af-2f51-4d5c-9eb0-2d56fd3f40db","resolution":{"observed_at":"2026-08-06T11:19:41.526979Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T11:19:41.196708Z","title":"The trojai software framework: An opensource tool for embedding trojans into deep 10 learning models, 2020","venue":null,"work_id":"5f81ced1-0557-4ddc-8534-b4b3b247fa74","year":2020},"citing_paper":{"arxiv_id":"2507.22813","last_updated":"2025-07-30T16:31:13Z","snapshot_observed_at":"2026-08-06T11:19:23.817467Z","submitted_at":"2025-07-30T16:31:13Z","title":"DISTIL: Data-Free Inversion of Suspicious Trojan Inputs via Latent Diffusion","version":1},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-06T11:19:29.081447Z"},"links":{"citing_paper":"/paper/2507.22813"},"observation_digest":"sha256:f98bc0b828578afe38dd6cc3e1b90dc5162087937afab343dc7b3e3f3887a4c6","observation_id":"0b71b525-f541-453e-bbac-0e890031c69a","resolution":{"observed_at":"2026-08-06T11:19:41.271457Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T11:19:29.239925Z","title":"Abs: Scanning neu- ral networks for back-doors by artificial brain stimulation","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2507.22813","last_updated":"2025-07-30T16:31:13Z","snapshot_observed_at":"2026-08-06T11:19:23.817467Z","submitted_at":"2025-07-30T16:31:13Z","title":"DISTIL: Data-Free Inversion of Suspicious Trojan Inputs via Latent Diffusion","version":1},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-06T11:19:29.239925Z"},"links":{"citing_paper":"/paper/2507.22813"},"observation_digest":"sha256:257755cccc05c8544a1bc1a5f15250502fb40860f8d5ba35f56b85dc84a9fc7a","observation_id":"73ec66dd-dba5-4d22-bac3-c5b65b2eee62","resolution":{"observed_at":"2026-08-06T11:19:29.239925Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T11:19:41.035121Z","title":"Trigger hunting with a topological prior for trojan detection","venue":null,"work_id":"7303bae1-ade6-48e4-8c43-2f37ff805908","year":2022},"citing_paper":{"arxiv_id":"2507.22813","last_updated":"2025-07-30T16:31:13Z","snapshot_observed_at":"2026-08-06T11:19:23.817467Z","submitted_at":"2025-07-30T16:31:13Z","title":"DISTIL: Data-Free Inversion of Suspicious Trojan Inputs via Latent Diffusion","version":1},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-06T11:19:29.344402Z"},"links":{"citing_paper":"/paper/2507.22813"},"observation_digest":"sha256:3f47f64b8bd9da79a515f4ae485e1227486a451e96416d10648e82eccdd7b6d4","observation_id":"8fa5a1f8-1a04-4100-bd4e-be098944ad4f","resolution":{"observed_at":"2026-08-06T11:19:41.103568Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T11:19:40.801093Z","title":"Scanning trojaned models using out-of-distribution samples","venue":null,"work_id":"e214e388-0550-4534-a03e-36b399319e23","year":2024},"citing_paper":{"arxiv_id":"2507.22813","last_updated":"2025-07-30T16:31:13Z","snapshot_observed_at":"2026-08-06T11:19:23.817467Z","submitted_at":"2025-07-30T16:31:13Z","title":"DISTIL: Data-Free Inversion of Suspicious Trojan Inputs via Latent Diffusion","version":1},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-06T11:19:29.460765Z"},"links":{"citing_paper":"/paper/2507.22813"},"observation_digest":"sha256:c21b0f0376b1ea4e55b93fc59431b9e7f3eb7e6d7356c2f65297c28d7cac0b41","observation_id":"bc8c8499-a50c-42e7-92f3-7154085a764b","resolution":{"observed_at":"2026-08-06T11:19:40.933126Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1912.02771","last_updated":"2019-12-06T23:16:45Z","snapshot_observed_at":"2026-08-04T11:47:47.518305Z","submitted_at":"2019-12-05T18:05:59Z","title":"Label-Consistent Backdoor Attacks","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1912.02771","snapshot_observed_at":"2026-08-06T11:19:29.552491Z","title":"Label-consistent backdoor attacks","venue":null,"work_id":null,"year":1912},"citing_paper":{"arxiv_id":"2507.22813","last_updated":"2025-07-30T16:31:13Z","snapshot_observed_at":"2026-08-06T11:19:23.817467Z","submitted_at":"2025-07-30T16:31:13Z","title":"DISTIL: Data-Free Inversion of Suspicious Trojan Inputs via Latent Diffusion","version":1},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-06T11:19:29.552491Z"},"links":{"cited_paper":"/paper/1912.02771","citing_paper":"/paper/2507.22813"},"observation_digest":"sha256:e31e1c9e09efa4dd338cd5b51b03ac32d365c26c1d21357297abe37bfa773ae0","observation_id":"c233d675-3b08-4e0d-b085-369f45cf740f","resolution":{"observed_at":"2026-08-06T11:19:29.552491Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T11:19:40.608348Z","title":"Trojan- ing attack on neural networks","venue":null,"work_id":"b5eb1048-e35b-4491-99e9-26eed4e49194","year":2018},"citing_paper":{"arxiv_id":"2507.22813","last_updated":"2025-07-30T16:31:13Z","snapshot_observed_at":"2026-08-06T11:19:23.817467Z","submitted_at":"2025-07-30T16:31:13Z","title":"DISTIL: Data-Free Inversion of Suspicious Trojan Inputs via Latent Diffusion","version":1},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-08-06T11:19:29.612954Z"},"links":{"citing_paper":"/paper/2507.22813"},"observation_digest":"sha256:6c2392745364b67312e19a2c624a088cdf79ba6eb9732b35566fdf753e3fe011","observation_id":"40dcbd57-97cf-42f7-aab8-efb30d4efb86","resolution":{"observed_at":"2026-08-06T11:19:40.683948Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T11:19:40.396657Z","title":"Certified robustness to label-flipping attacks via ran- domized smoothing","venue":null,"work_id":"30188c82-440d-49d6-84f0-01da2593df1c","year":2020},"citing_paper":{"arxiv_id":"2507.22813","last_updated":"2025-07-30T16:31:13Z","snapshot_observed_at":"2026-08-06T11:19:23.817467Z","submitted_at":"2025-07-30T16:31:13Z","title":"DISTIL: Data-Free Inversion of Suspicious Trojan Inputs via Latent Diffusion","version":1},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-08-06T11:19:29.687191Z"},"links":{"citing_paper":"/paper/2507.22813"},"observation_digest":"sha256:f149a3701a5e1fe24f59b46da065cd71c27d191af416c8b0816a5f36ff861dc4","observation_id":"a4b3e909-e654-445a-a6b6-bffce58efed7","resolution":{"observed_at":"2026-08-06T11:19:40.490737Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2110.14051","last_updated":"2022-12-03T15:10:18Z","snapshot_observed_at":"2026-07-06T12:02:19.650098Z","submitted_at":"2021-10-26T22:05:31Z","title":"A Unified Survey on Anomaly, Novelty, Open-Set, and Out-of-Distribution Detection: Solutions and Future Challenges","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2110.14051","snapshot_observed_at":"2026-08-06T11:19:29.755689Z","title":"A unified survey on anomaly, novelty, open-set, and out-of-distribution detection: Solutions and future chal- lenges","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2507.22813","last_updated":"2025-07-30T16:31:13Z","snapshot_observed_at":"2026-08-06T11:19:23.817467Z","submitted_at":"2025-07-30T16:31:13Z","title":"DISTIL: Data-Free Inversion of Suspicious Trojan Inputs via Latent Diffusion","version":1},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-08-06T11:19:29.755689Z"},"links":{"cited_paper":"/paper/2110.14051","citing_paper":"/paper/2507.22813"},"observation_digest":"sha256:a9f2d08b839eb7b1572b4506f90a5e5b3c8dcecc354ee147289813d1aff89da5","observation_id":"c6fb0c8b-4bcc-45ae-bbfa-6f2042783cbe","resolution":{"observed_at":"2026-08-06T11:19:29.755689Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T11:19:40.238040Z","title":"Fake it until you make it: Towards accurate near-distribution novelty detection","venue":null,"work_id":"67bf83c7-edb7-43e8-a045-55a9d229b7fb","year":2022},"citing_paper":{"arxiv_id":"2507.22813","last_updated":"2025-07-30T16:31:13Z","snapshot_observed_at":"2026-08-06T11:19:23.817467Z","submitted_at":"2025-07-30T16:31:13Z","title":"DISTIL: Data-Free Inversion of Suspicious Trojan Inputs via Latent Diffusion","version":1},"reference_index":58,"source":"pdf_text","source_observed_at":"2026-08-06T11:19:29.846610Z"},"links":{"citing_paper":"/paper/2507.22813"},"observation_digest":"sha256:da8ddbc0fdac8225152fa6b128092535be9a4878cb4289a51e7cf93fb07e0da3","observation_id":"3c9b021a-01a5-4bcc-aee0-90b2de214068","resolution":{"observed_at":"2026-08-06T11:19:40.304237Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2501.17289","last_updated":"2025-01-28T20:42:50Z","snapshot_observed_at":"2026-08-07T07:08:44.483908Z","submitted_at":"2025-01-28T20:42:50Z","title":"A Contrastive Teacher-Student Framework for Novelty Detection under Style Shifts","version":1},"cited_work":{"arxiv_id":"2501.17289","doi":null,"metadata_source":"pith","pith_arxiv_id":"2501.17289","snapshot_observed_at":"2026-08-06T11:19:34.242106Z","title":"A Contrastive Teacher-Student Framework for Novelty Detection under Style Shifts","venue":"cs.CV","work_id":"63996e00-f510-4977-af10-4db08fb0622c","year":2025},"citing_paper":{"arxiv_id":"2507.22813","last_updated":"2025-07-30T16:31:13Z","snapshot_observed_at":"2026-08-06T11:19:23.817467Z","submitted_at":"2025-07-30T16:31:13Z","title":"DISTIL: Data-Free Inversion of Suspicious Trojan Inputs via Latent Diffusion","version":1},"reference_index":59,"source":"pdf_text","source_observed_at":"2026-08-06T11:19:29.929038Z"},"links":{"cited_paper":"/paper/2501.17289","citing_paper":"/paper/2507.22813"},"observation_digest":"sha256:646859f8d816fa8d17c12339871cdba27e5003b9467c1341712c61d5ca74dccb","observation_id":"a4200bc0-16a0-4e3a-bf91-2a0a2396795a","resolution":{"observed_at":"2026-08-06T11:19:34.409584Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T11:19:40.075901Z","title":"Universal novelty detection through adaptive con- trastive learning","venue":null,"work_id":"29d98f9d-ecd3-48dc-b351-acaba69493e5","year":2024},"citing_paper":{"arxiv_id":"2507.22813","last_updated":"2025-07-30T16:31:13Z","snapshot_observed_at":"2026-08-06T11:19:23.817467Z","submitted_at":"2025-07-30T16:31:13Z","title":"DISTIL: Data-Free Inversion of Suspicious Trojan Inputs via Latent Diffusion","version":1},"reference_index":60,"source":"pdf_text","source_observed_at":"2026-08-06T11:19:30.093630Z"},"links":{"citing_paper":"/paper/2507.22813"},"observation_digest":"sha256:d30bd21d359dae6135b2d69b31b59b62c7efde9895c3d93cf3dd850f87764e06","observation_id":"7df42c65-4869-4faa-adfb-dd6c73f447ef","resolution":{"observed_at":"2026-08-06T11:19:40.154886Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.10744","last_updated":"2025-01-26T17:35:40Z","snapshot_observed_at":"2026-07-06T19:33:12.610676Z","submitted_at":"2024-10-14T17:22:12Z","title":"Adversarially Robust Out-of-Distribution Detection Using Lyapunov-Stabilized Embeddings","version":2},"cited_work":{"arxiv_id":"2410.10744","doi":null,"metadata_source":"pith","pith_arxiv_id":"2410.10744","snapshot_observed_at":"2026-08-06T11:19:33.966365Z","title":"Adversarially Robust Out-of-Distribution Detection Using Lyapunov-Stabilized Embeddings","venue":"cs.LG","work_id":"8fcfc34d-4f94-417f-b9cd-8ab7097fd30a","year":2024},"citing_paper":{"arxiv_id":"2507.22813","last_updated":"2025-07-30T16:31:13Z","snapshot_observed_at":"2026-08-06T11:19:23.817467Z","submitted_at":"2025-07-30T16:31:13Z","title":"DISTIL: Data-Free Inversion of Suspicious Trojan Inputs via Latent Diffusion","version":1},"reference_index":61,"source":"pdf_text","source_observed_at":"2026-08-06T11:19:30.153465Z"},"links":{"cited_paper":"/paper/2410.10744","citing_paper":"/paper/2507.22813"},"observation_digest":"sha256:a03a5e67d5b862db0853258caf51eb0df660fd41a224be8a7bd92c3dfa8eac92","observation_id":"0120f702-402c-43a2-b6f7-c6e8f0b05149","resolution":{"observed_at":"2026-08-06T11:19:34.107052Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T11:19:39.860467Z","title":"Rodeo: Robust outlier detection via exposing adaptive out-of-distribution samples","venue":null,"work_id":"319655b5-3c0e-401b-8759-3af01dcc29b9","year":2024},"citing_paper":{"arxiv_id":"2507.22813","last_updated":"2025-07-30T16:31:13Z","snapshot_observed_at":"2026-08-06T11:19:23.817467Z","submitted_at":"2025-07-30T16:31:13Z","title":"DISTIL: Data-Free Inversion of Suspicious Trojan Inputs via Latent Diffusion","version":1},"reference_index":62,"source":"pdf_text","source_observed_at":"2026-08-06T11:19:30.254616Z"},"links":{"citing_paper":"/paper/2507.22813"},"observation_digest":"sha256:7623591368e33972e486bc492f164e3cf44724adcbb5b8b068af3a49e40288eb","observation_id":"e8c1bb44-c5d5-4c2e-a4e5-d6fd8b010c51","resolution":{"observed_at":"2026-08-06T11:19:39.968141Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T11:19:39.690178Z","title":"Killing it with zero-shot: Adversar- ially robust novelty detection","venue":null,"work_id":"d1bd0366-176a-46ae-b439-f0e116d0da1a","year":2024},"citing_paper":{"arxiv_id":"2507.22813","last_updated":"2025-07-30T16:31:13Z","snapshot_observed_at":"2026-08-06T11:19:23.817467Z","submitted_at":"2025-07-30T16:31:13Z","title":"DISTIL: Data-Free Inversion of Suspicious Trojan Inputs via Latent Diffusion","version":1},"reference_index":63,"source":"pdf_text","source_observed_at":"2026-08-06T11:19:30.327107Z"},"links":{"citing_paper":"/paper/2507.22813"},"observation_digest":"sha256:d5c592fd3ed624e27c82b7c01002a92caf6080f2d5789e9257d6e7ab85553eb4","observation_id":"63a5f8b4-17b3-4a87-9a5f-7f1515ee125a","resolution":{"observed_at":"2026-08-06T11:19:39.776548Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T11:19:39.490030Z","title":null,"venue":null,"work_id":"753e3a40-47d5-4806-bb6d-1bcfc041ac4b","year":2024},"citing_paper":{"arxiv_id":"2507.22813","last_updated":"2025-07-30T16:31:13Z","snapshot_observed_at":"2026-08-06T11:19:23.817467Z","submitted_at":"2025-07-30T16:31:13Z","title":"DISTIL: Data-Free Inversion of Suspicious Trojan Inputs via Latent Diffusion","version":1},"reference_index":64,"source":"pdf_text","source_observed_at":"2026-08-06T11:19:30.432841Z"},"links":{"citing_paper":"/paper/2507.22813"},"observation_digest":"sha256:5f6a6aaea808e1333ed9326c2196bbc5f51af09484bd7cf6ae5b42e0af5e0fba","observation_id":"dad79244-2cef-4c2a-912c-7d1b578ae224","resolution":{"observed_at":"2026-08-06T11:19:39.582462Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T11:19:39.315266Z","title":"Mitigating spurious negative pairs for robust industrial anomaly detec- tion, 2025","venue":null,"work_id":"33591387-df9b-421c-bdef-abd34856a8ea","year":2025},"citing_paper":{"arxiv_id":"2507.22813","last_updated":"2025-07-30T16:31:13Z","snapshot_observed_at":"2026-08-06T11:19:23.817467Z","submitted_at":"2025-07-30T16:31:13Z","title":"DISTIL: Data-Free Inversion of Suspicious Trojan Inputs via Latent Diffusion","version":1},"reference_index":65,"source":"pdf_text","source_observed_at":"2026-08-06T11:19:30.523076Z"},"links":{"citing_paper":"/paper/2507.22813"},"observation_digest":"sha256:7cffb90a09709334cfa4ce980a74a292c754dac12725bad0773436924be3b4a8","observation_id":"1d389c85-cd16-46af-900c-50b5b6a44f42","resolution":{"observed_at":"2026-08-06T11:19:39.421431Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2504.11055","last_updated":"2025-08-11T09:35:45Z","snapshot_observed_at":"2026-08-07T16:05:31.790548Z","submitted_at":"2025-04-15T10:42:25Z","title":"Crane: Context-Guided Prompt Learning and Attention Refinement for Zero-Shot Anomaly Detection","version":2},"cited_work":{"arxiv_id":"2504.11055","doi":null,"metadata_source":"pith","pith_arxiv_id":"2504.11055","snapshot_observed_at":"2026-08-06T11:19:33.747476Z","title":"Crane: Context-Guided Prompt Learning and Attention Refinement for Zero-Shot Anomaly Detection","venue":"cs.CV","work_id":"ba2613c9-ae84-4d80-b26e-8d64003121ab","year":2025},"citing_paper":{"arxiv_id":"2507.22813","last_updated":"2025-07-30T16:31:13Z","snapshot_observed_at":"2026-08-06T11:19:23.817467Z","submitted_at":"2025-07-30T16:31:13Z","title":"DISTIL: Data-Free Inversion of Suspicious Trojan Inputs via Latent Diffusion","version":1},"reference_index":66,"source":"pdf_text","source_observed_at":"2026-08-06T11:19:30.658979Z"},"links":{"cited_paper":"/paper/2504.11055","citing_paper":"/paper/2507.22813"},"observation_digest":"sha256:9019a58cbfd5df4ba5975227d66ce2f797ae628aeb3154a8c11634d1520e1c5f","observation_id":"4df17c49-f668-4962-955d-9b04df72360c","resolution":{"observed_at":"2026-08-06T11:19:33.840810Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T11:19:39.102282Z","title":"Patch- guard: Adversarially robust anomaly detection and local- ization through vision transformers and pseudo anomalies,","venue":null,"work_id":"115c86c5-91d3-4f29-9888-eae2afbcedf4","year":null},"citing_paper":{"arxiv_id":"2507.22813","last_updated":"2025-07-30T16:31:13Z","snapshot_observed_at":"2026-08-06T11:19:23.817467Z","submitted_at":"2025-07-30T16:31:13Z","title":"DISTIL: Data-Free Inversion of Suspicious Trojan Inputs via Latent Diffusion","version":1},"reference_index":67,"source":"pdf_text","source_observed_at":"2026-08-06T11:19:30.833494Z"},"links":{"citing_paper":"/paper/2507.22813"},"observation_digest":"sha256:3ebc1682a8b07e5d89d7826931f2ac14b0c34fed825d7738d2aa4151fa9201f9","observation_id":"8d79bbbe-cc88-48a8-9a5e-d10f4f207839","resolution":{"observed_at":"2026-08-06T11:19:39.202171Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T11:19:38.937376Z","title":"Single image backdoor in- version via robust smoothed classifiers","venue":null,"work_id":"c1eb36b8-b978-44c5-a03c-d1e4f4b5b72d","year":2023},"citing_paper":{"arxiv_id":"2507.22813","last_updated":"2025-07-30T16:31:13Z","snapshot_observed_at":"2026-08-06T11:19:23.817467Z","submitted_at":"2025-07-30T16:31:13Z","title":"DISTIL: Data-Free Inversion of Suspicious Trojan Inputs via Latent Diffusion","version":1},"reference_index":68,"source":"pdf_text","source_observed_at":"2026-08-06T11:19:31.129884Z"},"links":{"citing_paper":"/paper/2507.22813"},"observation_digest":"sha256:bc598d8fbb0fb855fa19baf8f05dfc1ba9f0c44d52e50d8e61bee684c3770897","observation_id":"bec7d3d3-f70c-4a1d-820a-7d758c6e1445","resolution":{"observed_at":"2026-08-06T11:19:39.026088Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T11:19:38.758705Z","title":"Tabor: A highly accurate approach to inspecting and restoring trojan backdoors in ai systems, 2019","venue":null,"work_id":"b9030545-dc5a-41f4-9696-31a3d670f5d0","year":2019},"citing_paper":{"arxiv_id":"2507.22813","last_updated":"2025-07-30T16:31:13Z","snapshot_observed_at":"2026-08-06T11:19:23.817467Z","submitted_at":"2025-07-30T16:31:13Z","title":"DISTIL: Data-Free Inversion of Suspicious Trojan Inputs via Latent Diffusion","version":1},"reference_index":69,"source":"pdf_text","source_observed_at":"2026-08-06T11:19:31.234574Z"},"links":{"citing_paper":"/paper/2507.22813"},"observation_digest":"sha256:ec24bcc7cd4130c46f7dcfc22d666dba298e68e1e059710a26629c9b77201349","observation_id":"f2c84910-d4a7-4350-80d3-f800def43294","resolution":{"observed_at":"2026-08-06T11:19:38.862644Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T11:19:31.363352Z","title":"Miller, and George Kesidis","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2507.22813","last_updated":"2025-07-30T16:31:13Z","snapshot_observed_at":"2026-08-06T11:19:23.817467Z","submitted_at":"2025-07-30T16:31:13Z","title":"DISTIL: Data-Free Inversion of Suspicious Trojan Inputs via Latent Diffusion","version":1},"reference_index":70,"source":"pdf_text","source_observed_at":"2026-08-06T11:19:31.363352Z"},"links":{"citing_paper":"/paper/2507.22813"},"observation_digest":"sha256:123271bca6199a2993977f6e82453b7b7ba86b575753846f026a576777b49568","observation_id":"0e16818d-e267-4be4-aa24-0e79915d0ab9","resolution":{"observed_at":"2026-08-06T11:19:31.363352Z","resolver_source":null,"status":"malformed_identifier"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2007.14169","last_updated":"2020-07-28T12:44:03Z","snapshot_observed_at":"2026-07-06T09:42:26.265372Z","submitted_at":"2020-07-28T12:44:03Z","title":"Semantic Width and the Fixed-Parameter Tractability of Constraint Satisfaction Problems","version":1},"cited_work":{"arxiv_id":"2007.14169","doi":null,"metadata_source":"pith","pith_arxiv_id":"2007.14169","snapshot_observed_at":"2026-08-06T11:19:33.151305Z","title":"Semantic Width and the Fixed-Parameter Tractability of Constraint Satisfaction Problems","venue":"cs.CC","work_id":"c16b4e1e-1a7f-432b-a70b-2c6bd56c75d8","year":2020},"citing_paper":{"arxiv_id":"2507.22813","last_updated":"2025-07-30T16:31:13Z","snapshot_observed_at":"2026-08-06T11:19:23.817467Z","submitted_at":"2025-07-30T16:31:13Z","title":"DISTIL: Data-Free Inversion of Suspicious Trojan Inputs via Latent Diffusion","version":1},"reference_index":71,"source":"pdf_text","source_observed_at":"2026-08-06T11:19:31.477686Z"},"links":{"cited_paper":"/paper/2007.14169","citing_paper":"/paper/2507.22813"},"observation_digest":"sha256:810e794e1c16de2843d6c4ae899f38935f1b036cc8a5798fdf31af41b9825bf3","observation_id":"2f4c23ea-2670-43ff-8e38-deff453bd8ee","resolution":{"observed_at":"2026-08-06T11:19:33.279450Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T11:19:38.593632Z","title":"Learning multiple layers of features from tiny images","venue":null,"work_id":"ea58e16a-9671-4a7d-837f-d81be370b252","year":2009},"citing_paper":{"arxiv_id":"2507.22813","last_updated":"2025-07-30T16:31:13Z","snapshot_observed_at":"2026-08-06T11:19:23.817467Z","submitted_at":"2025-07-30T16:31:13Z","title":"DISTIL: Data-Free Inversion of Suspicious Trojan Inputs via Latent Diffusion","version":1},"reference_index":72,"source":"pdf_text","source_observed_at":"2026-08-06T11:19:31.548610Z"},"links":{"citing_paper":"/paper/2507.22813"},"observation_digest":"sha256:df188c351d086e990bdd2be336c75c29935ebe59a7989dfbba5ae2e137ff2b95","observation_id":"cbfccafc-6fdb-47d9-8b08-31023d273293","resolution":{"observed_at":"2026-08-06T11:19:38.690580Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T11:19:38.389907Z","title":"Detection of traffic signs in real-world images: The german traffic sign detection bench- mark","venue":null,"work_id":"32a21454-b7b2-4aa4-8b12-01649ffa8f67","year":2013},"citing_paper":{"arxiv_id":"2507.22813","last_updated":"2025-07-30T16:31:13Z","snapshot_observed_at":"2026-08-06T11:19:23.817467Z","submitted_at":"2025-07-30T16:31:13Z","title":"DISTIL: Data-Free Inversion of Suspicious Trojan Inputs via Latent Diffusion","version":1},"reference_index":73,"source":"pdf_text","source_observed_at":"2026-08-06T11:19:31.620465Z"},"links":{"citing_paper":"/paper/2507.22813"},"observation_digest":"sha256:abb675c73a3620f854e2636d91e116992cb3e64158fcb9c45fe825604a6473ab","observation_id":"b6ccd33b-7e62-4302-a9ed-f04b0524bbc7","resolution":{"observed_at":"2026-08-06T11:19:38.485990Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T11:19:31.691242Z","title":null,"venue":null,"work_id":null,"year":2009},"citing_paper":{"arxiv_id":"2507.22813","last_updated":"2025-07-30T16:31:13Z","snapshot_observed_at":"2026-08-06T11:19:23.817467Z","submitted_at":"2025-07-30T16:31:13Z","title":"DISTIL: Data-Free Inversion of Suspicious Trojan Inputs via Latent Diffusion","version":1},"reference_index":74,"source":"pdf_text","source_observed_at":"2026-08-06T11:19:31.691242Z"},"links":{"citing_paper":"/paper/2507.22813"},"observation_digest":"sha256:265ff9f14ee1bb693c7e77073497e8069d57d7f1f098ed57f296dff1ecb6bc62","observation_id":"e790e1bd-5838-40fe-aab9-02d9e7593302","resolution":{"observed_at":"2026-08-06T11:19:31.691242Z","resolver_source":null,"status":"malformed_identifier"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T11:19:38.176517Z","title":"Outputs: Decision (Trojaned / Clean) and, if Trojaned, the corresponding trigger δtar src","venue":null,"work_id":"cc5c7fb2-1991-4af8-9313-0694ee89668b","year":null},"citing_paper":{"arxiv_id":"2507.22813","last_updated":"2025-07-30T16:31:13Z","snapshot_observed_at":"2026-08-06T11:19:23.817467Z","submitted_at":"2025-07-30T16:31:13Z","title":"DISTIL: Data-Free Inversion of Suspicious Trojan Inputs via Latent Diffusion","version":1},"reference_index":76,"source":"pdf_text","source_observed_at":"2026-08-06T11:19:31.800635Z"},"links":{"citing_paper":"/paper/2507.22813"},"observation_digest":"sha256:9922100b7e66104262b31151eb36233e50326fe2284c88aa48186b4979eeeb18","observation_id":"b30a6253-0b36-4c09-8791-de0505025c61","resolution":{"observed_at":"2026-08-06T11:19:38.255468Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T11:19:37.988677Z","title":"DDPMs have emerged as a promising approach for gener- ating high-quality data across various domains, particularly in image and video synthesis","venue":null,"work_id":"9cd15d00-7a7e-4b46-b978-b530c6f8a5a0","year":null},"citing_paper":{"arxiv_id":"2507.22813","last_updated":"2025-07-30T16:31:13Z","snapshot_observed_at":"2026-08-06T11:19:23.817467Z","submitted_at":"2025-07-30T16:31:13Z","title":"DISTIL: Data-Free Inversion of Suspicious Trojan Inputs via Latent Diffusion","version":1},"reference_index":77,"source":"pdf_text","source_observed_at":"2026-08-06T11:19:31.974737Z"},"links":{"citing_paper":"/paper/2507.22813"},"observation_digest":"sha256:7f09902fc68dd9e63c309027576f83c472a14d766af500a11329845a96ef051e","observation_id":"26c07662-d25f-4b83-a0e1-9e8491cd6b93","resolution":{"observed_at":"2026-08-06T11:19:38.054825Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T11:19:37.771003Z","title":"As expected, these patterns ap- pear noisy and lack coherent structure, demonstrating that DISTIL does not erroneously extract trigger-like features from benign systems","venue":null,"work_id":"1a89b89e-2261-4575-8b9f-275f4b7a5c03","year":null},"citing_paper":{"arxiv_id":"2507.22813","last_updated":"2025-07-30T16:31:13Z","snapshot_observed_at":"2026-08-06T11:19:23.817467Z","submitted_at":"2025-07-30T16:31:13Z","title":"DISTIL: Data-Free Inversion of Suspicious Trojan Inputs via Latent Diffusion","version":1},"reference_index":78,"source":"pdf_text","source_observed_at":"2026-08-06T11:19:32.092808Z"},"links":{"citing_paper":"/paper/2507.22813"},"observation_digest":"sha256:4337b4923ab0d473451dc0a7becc818934b28f78c0bfa0081401784b8ae7e0e1","observation_id":"2816a82f-18b7-44f2-9939-451e45b71fa3","resolution":{"observed_at":"2026-08-06T11:19:37.888447Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T11:19:37.591995Z","title":null,"venue":null,"work_id":"773fc906-9f58-4366-9a44-324313196001","year":null},"citing_paper":{"arxiv_id":"2507.22813","last_updated":"2025-07-30T16:31:13Z","snapshot_observed_at":"2026-08-06T11:19:23.817467Z","submitted_at":"2025-07-30T16:31:13Z","title":"DISTIL: Data-Free Inversion of Suspicious Trojan Inputs via Latent Diffusion","version":1},"reference_index":79,"source":"pdf_text","source_observed_at":"2026-08-06T11:19:32.255326Z"},"links":{"citing_paper":"/paper/2507.22813"},"observation_digest":"sha256:7a5c5fdbc1aa0f738c5aaa653f08c8f643f0286b97a56bafb65e86bf9a54223b","observation_id":"9e6271ab-82c8-4b55-8bb4-d30584c8c644","resolution":{"observed_at":"2026-08-06T11:19:37.667042Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T11:19:37.443675Z","title":"BadNet [1] introduces a hidden pattern into datasets dur- ing training, often a compact and noticeable visual element","venue":null,"work_id":"1c13698a-a882-472e-bb7c-d66ec692313a","year":null},"citing_paper":{"arxiv_id":"2507.22813","last_updated":"2025-07-30T16:31:13Z","snapshot_observed_at":"2026-08-06T11:19:23.817467Z","submitted_at":"2025-07-30T16:31:13Z","title":"DISTIL: Data-Free Inversion of Suspicious Trojan Inputs via Latent Diffusion","version":1},"reference_index":80,"source":"pdf_text","source_observed_at":"2026-08-06T11:19:32.390388Z"},"links":{"citing_paper":"/paper/2507.22813"},"observation_digest":"sha256:332ecd7cd5a5b38a6382cf392f95a74a45ecaeb168d5e3d11f76a86204b8016d","observation_id":"2003e752-6fb3-4ee0-a0c2-0feb148cbfc8","resolution":{"observed_at":"2026-08-06T11:19:37.510708Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T11:19:37.246375Z","title":"blind spots,","venue":null,"work_id":"43f6a2d9-6744-4d68-9190-24be25caba12","year":null},"citing_paper":{"arxiv_id":"2507.22813","last_updated":"2025-07-30T16:31:13Z","snapshot_observed_at":"2026-08-06T11:19:23.817467Z","submitted_at":"2025-07-30T16:31:13Z","title":"DISTIL: Data-Free Inversion of Suspicious Trojan Inputs via Latent Diffusion","version":1},"reference_index":81,"source":"pdf_text","source_observed_at":"2026-08-06T11:19:32.505053Z"},"links":{"citing_paper":"/paper/2507.22813"},"observation_digest":"sha256:31355820b38f4b073a363d1adf79f82122a26a412f8e5eb73cbbfb478823e66e","observation_id":"d7f63218-8fca-4573-8e64-0666ac0be82d","resolution":{"observed_at":"2026-08-06T11:19:37.366917Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T11:19:37.098304Z","title":"BackdoorBench Benchmark","venue":null,"work_id":"248c3759-0159-416e-a838-e98734cccff1","year":null},"citing_paper":{"arxiv_id":"2507.22813","last_updated":"2025-07-30T16:31:13Z","snapshot_observed_at":"2026-08-06T11:19:23.817467Z","submitted_at":"2025-07-30T16:31:13Z","title":"DISTIL: Data-Free Inversion of Suspicious Trojan Inputs via Latent Diffusion","version":1},"reference_index":82,"source":"pdf_text","source_observed_at":"2026-08-06T11:19:32.635308Z"},"links":{"citing_paper":"/paper/2507.22813"},"observation_digest":"sha256:01c4de897b8ac6b6c99a0d3401cf19097a6a64cabf309fb231c5fab1ec1edd05","observation_id":"027fe06a-38bd-45a5-9179-171a7c9cf997","resolution":{"observed_at":"2026-08-06T11:19:37.170909Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T11:19:36.857371Z","title":null,"venue":null,"work_id":"89c882a6-e920-47cc-a827-6b4ac5f9eb70","year":null},"citing_paper":{"arxiv_id":"2507.22813","last_updated":"2025-07-30T16:31:13Z","snapshot_observed_at":"2026-08-06T11:19:23.817467Z","submitted_at":"2025-07-30T16:31:13Z","title":"DISTIL: Data-Free Inversion of Suspicious Trojan Inputs via Latent Diffusion","version":1},"reference_index":83,"source":"pdf_text","source_observed_at":"2026-08-06T11:19:32.823544Z"},"links":{"citing_paper":"/paper/2507.22813"},"observation_digest":"sha256:36193392230060e8c442d15ad85ebfa7c0a5216f46e3fce595aab9f9c1f27fe1","observation_id":"ceeebde2-8e73-4b44-a62a-2477323b3940","resolution":{"observed_at":"2026-08-06T11:19:36.956489Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2506.09237","doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T11:19:33.636055Z","title":null,"venue":null,"work_id":"a918670b-5496-4f58-911e-f52b1982efec","year":null},"citing_paper":{"arxiv_id":"2507.22813","last_updated":"2025-07-30T16:31:13Z","snapshot_observed_at":"2026-08-06T11:19:23.817467Z","submitted_at":"2025-07-30T16:31:13Z","title":"DISTIL: Data-Free Inversion of Suspicious Trojan Inputs via Latent Diffusion","version":1},"reference_index":2025,"source":"pdf_text","source_observed_at":"2026-08-06T11:19:30.937311Z"},"links":{"citing_paper":"/paper/2507.22813"},"observation_digest":"sha256:97f60d5caacb1bcd84d62325d06e12aff83161049ab32f5c57373eeab59bdbc7","observation_id":"d4fa5c5d-60f9-4061-a44e-d314965f89f3","resolution":{"observed_at":"2026-08-06T11:19:33.672073Z","resolver_source":"raw_fallback","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2507.22813","last_updated":"2025-07-30T16:31:13Z","latest_version":1,"primary_category":"cs.CV","snapshot_observed_at":"2026-08-06T11:19:23.817467Z","submitted_at":"2025-07-30T16:31:13Z","title":"DISTIL: Data-Free Inversion of Suspicious Trojan Inputs via Latent Diffusion"},"reference_resolution":{"displayed":83,"state_counts":{"malformed_identifier":3,"metadata_mismatch":2,"parse_uncertain":0,"unresolved":19,"verified_exact":8,"verified_fuzzy":51},"total_outbound_references":83},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"thesis":"As of 8 August 2026, this Paper Citation Record lists 83 of 83 outbound references and 0 inbound Pith citation observations for arXiv:2507.22813."}