{"as_of":"2026-08-06T18:04:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:83d8cb19e6d3143335b5f7933a57e4882627aa804b7a6ea8e9d769f7877cc695","coverage":[{"denominator":48,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":48,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-05T16:20:23.398486Z","state":"measured"},{"denominator":48,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":48,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-06T06:34:29.942622+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2508.18737/citation-record","integrity":"/paper/2508.18737/integrity","json":"/paper/2508.18737/citation-record.json","paper":"/paper/2508.18737"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:20:23.229261Z","title":"Communication-efficient learning of deep networks from decentralized data,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2508.18737","last_updated":"2025-08-26T07:09:15Z","snapshot_observed_at":"2026-08-06T00:25:36.979671Z","submitted_at":"2025-08-26T07:09:15Z","title":"FLAegis: A Two-Layer Defense Framework for Federated Learning Against Poisoning Attacks","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-05T16:20:23.229261Z"},"links":{"citing_paper":"/paper/2508.18737"},"observation_digest":"sha256:c73a5fe065d54997874695f9d80fd5c0081a393c6a16485f08811f8b8c5187a9","observation_id":"381d9cb3-a51c-49c2-abec-9532463295d8","resolution":{"observed_at":"2026-08-05T16:20:23.229261Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:20:23.910401Z","title":"Federated machine learning: Concept and applications,","venue":null,"work_id":"7650e02e-684a-4400-a601-f9ecc9fd648e","year":2019},"citing_paper":{"arxiv_id":"2508.18737","last_updated":"2025-08-26T07:09:15Z","snapshot_observed_at":"2026-08-06T00:25:36.979671Z","submitted_at":"2025-08-26T07:09:15Z","title":"FLAegis: A Two-Layer Defense Framework for Federated Learning Against Poisoning Attacks","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-05T16:20:23.233506Z"},"links":{"citing_paper":"/paper/2508.18737"},"observation_digest":"sha256:d2a7465e57fa15653db39e44c9dca69735e3ec6455b95d6a131898d1f5327b9e","observation_id":"2a8313c4-2ec0-4bf9-b022-480e2384d4d4","resolution":{"observed_at":"2026-08-05T16:20:23.914839Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:20:23.895536Z","title":"The eu general data protection regulation (gdpr): Eu- ropean regulation that has a global impact,","venue":null,"work_id":"3dd09551-f421-4b35-a212-c6478effa859","year":2017},"citing_paper":{"arxiv_id":"2508.18737","last_updated":"2025-08-26T07:09:15Z","snapshot_observed_at":"2026-08-06T00:25:36.979671Z","submitted_at":"2025-08-26T07:09:15Z","title":"FLAegis: A Two-Layer Defense Framework for Federated Learning Against Poisoning Attacks","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-05T16:20:23.237294Z"},"links":{"citing_paper":"/paper/2508.18737"},"observation_digest":"sha256:2d477d079370dd1f22d6ae0f3edef0885167fa5be664542304f5ae4420f05c16","observation_id":"a04a6390-60bb-40dd-8bcc-d404cf2db3cc","resolution":{"observed_at":"2026-08-05T16:20:23.900489Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:20:23.241079Z","title":"Ma- chine learning with adversaries: Byzantine tolerant gradient descent,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2508.18737","last_updated":"2025-08-26T07:09:15Z","snapshot_observed_at":"2026-08-06T00:25:36.979671Z","submitted_at":"2025-08-26T07:09:15Z","title":"FLAegis: A Two-Layer Defense Framework for Federated Learning Against Poisoning Attacks","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-05T16:20:23.241079Z"},"links":{"citing_paper":"/paper/2508.18737"},"observation_digest":"sha256:ff456b60ae24e1b37aa0cfe9d8f40b1ac3c07af6158bc72da2a01181e59875a2","observation_id":"a06057ec-871d-44a6-a396-ef3736bff5c1","resolution":{"observed_at":"2026-08-05T16:20:23.241079Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:20:23.875644Z","title":"Can machine learning be secure?","venue":null,"work_id":"7ce049ce-30c5-4e74-9019-5c74df6f4118","year":2006},"citing_paper":{"arxiv_id":"2508.18737","last_updated":"2025-08-26T07:09:15Z","snapshot_observed_at":"2026-08-06T00:25:36.979671Z","submitted_at":"2025-08-26T07:09:15Z","title":"FLAegis: A Two-Layer Defense Framework for Federated Learning Against Poisoning Attacks","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-05T16:20:23.244549Z"},"links":{"citing_paper":"/paper/2508.18737"},"observation_digest":"sha256:f698b69064507a36886d2eeef7bd47a260c9fe61a535d63d92fb749d9f75bb60","observation_id":"e0e50ca1-ae20-4525-9ce1-8881a736a465","resolution":{"observed_at":"2026-08-05T16:20:23.880046Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:20:23.863622Z","title":"How to backdoor federated learning,","venue":null,"work_id":"5c855c26-7fd8-4125-948f-fb0581d91201","year":2020},"citing_paper":{"arxiv_id":"2508.18737","last_updated":"2025-08-26T07:09:15Z","snapshot_observed_at":"2026-08-06T00:25:36.979671Z","submitted_at":"2025-08-26T07:09:15Z","title":"FLAegis: A Two-Layer Defense Framework for Federated Learning Against Poisoning Attacks","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-05T16:20:23.248271Z"},"links":{"citing_paper":"/paper/2508.18737"},"observation_digest":"sha256:edca84f87d8f091d8808355e090d87f08184986d85c27250eafc75658ac71d76","observation_id":"f5389eb4-e418-43c8-a276-e0f2801d487f","resolution":{"observed_at":"2026-08-05T16:20:23.868054Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:20:23.853444Z","title":"A comprehensive survey on poisoning attacks and countermeasures in machine learning,","venue":null,"work_id":"30cdcc0d-2a55-4ed6-b529-f77fbdf74e1d","year":2022},"citing_paper":{"arxiv_id":"2508.18737","last_updated":"2025-08-26T07:09:15Z","snapshot_observed_at":"2026-08-06T00:25:36.979671Z","submitted_at":"2025-08-26T07:09:15Z","title":"FLAegis: A Two-Layer Defense Framework for Federated Learning Against Poisoning Attacks","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-05T16:20:23.252206Z"},"links":{"citing_paper":"/paper/2508.18737"},"observation_digest":"sha256:428dbc13cbb2c735a41add26792fe729b9219f1d9cd2fefc1ee8a7bf24954831","observation_id":"c474600c-7d07-49f6-b4f9-71debefa8883","resolution":{"observed_at":"2026-08-05T16:20:23.857057Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:20:23.843003Z","title":"Poisoning attacks in federated learning: A survey,","venue":null,"work_id":"890e76b0-b67f-4459-b972-6cea822f1b0d","year":2023},"citing_paper":{"arxiv_id":"2508.18737","last_updated":"2025-08-26T07:09:15Z","snapshot_observed_at":"2026-08-06T00:25:36.979671Z","submitted_at":"2025-08-26T07:09:15Z","title":"FLAegis: A Two-Layer Defense Framework for Federated Learning Against Poisoning Attacks","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-05T16:20:23.255548Z"},"links":{"citing_paper":"/paper/2508.18737"},"observation_digest":"sha256:f3b4e7428010bb9f6851886733b23035a5980e2a42490864d41647e33b498906","observation_id":"e7693f2b-cb57-4db3-8947-addb45ffa6d6","resolution":{"observed_at":"2026-08-05T16:20:23.846464Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:20:23.259036Z","title":"Local model poisoning attacks to {Byzantine-Robust} federated learning,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2508.18737","last_updated":"2025-08-26T07:09:15Z","snapshot_observed_at":"2026-08-06T00:25:36.979671Z","submitted_at":"2025-08-26T07:09:15Z","title":"FLAegis: A Two-Layer Defense Framework for Federated Learning Against Poisoning Attacks","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-05T16:20:23.259036Z"},"links":{"citing_paper":"/paper/2508.18737"},"observation_digest":"sha256:1159da72467d54710fe4da38a4b17eadabc53e433ecb1fa7c19a3904a7304d02","observation_id":"47d1746e-ef28-4dea-8ba8-05c549496350","resolution":{"observed_at":"2026-08-05T16:20:23.259036Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:20:23.826678Z","title":"On the byzantine robustness of clustered federated learning,","venue":null,"work_id":"179909a7-8e72-4cd0-8102-3166582da2a7","year":2020},"citing_paper":{"arxiv_id":"2508.18737","last_updated":"2025-08-26T07:09:15Z","snapshot_observed_at":"2026-08-06T00:25:36.979671Z","submitted_at":"2025-08-26T07:09:15Z","title":"FLAegis: A Two-Layer Defense Framework for Federated Learning Against Poisoning Attacks","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-05T16:20:23.262685Z"},"links":{"citing_paper":"/paper/2508.18737"},"observation_digest":"sha256:6298bc603c9a35e5363474c9df965c7ccc5b5ef3701b660ca4bf29b09c9bbf1f","observation_id":"599e9319-3925-410d-92a2-62243fb96428","resolution":{"observed_at":"2026-08-05T16:20:23.830514Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:20:23.816460Z","title":"A symbolic representation of time series, with implications for streaming algorithms,","venue":null,"work_id":"d34b61e4-d466-4f37-ac92-b0bc4e667079","year":2003},"citing_paper":{"arxiv_id":"2508.18737","last_updated":"2025-08-26T07:09:15Z","snapshot_observed_at":"2026-08-06T00:25:36.979671Z","submitted_at":"2025-08-26T07:09:15Z","title":"FLAegis: A Two-Layer Defense Framework for Federated Learning Against Poisoning Attacks","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-05T16:20:23.266586Z"},"links":{"citing_paper":"/paper/2508.18737"},"observation_digest":"sha256:20625cfd7a022735418a3bd40e2e32790997d0885ea737006f599d763ac42d59","observation_id":"43e6b741-960f-4d19-be1e-96de679bb75d","resolution":{"observed_at":"2026-08-05T16:20:23.820127Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:20:23.805273Z","title":"Chapter 11 - recommendation engines,","venue":null,"work_id":"c80b5bdd-7b42-4d9d-b678-3dcd294af149","year":2019},"citing_paper":{"arxiv_id":"2508.18737","last_updated":"2025-08-26T07:09:15Z","snapshot_observed_at":"2026-08-06T00:25:36.979671Z","submitted_at":"2025-08-26T07:09:15Z","title":"FLAegis: A Two-Layer Defense Framework for Federated Learning Against Poisoning Attacks","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-05T16:20:23.270280Z"},"links":{"citing_paper":"/paper/2508.18737"},"observation_digest":"sha256:e703d482f45629c0a9b0fb998bc482801391332e7043f2ead0e91238393e4dd3","observation_id":"5e9db837-0d2b-4ecb-98a7-3cfee1fe8ecc","resolution":{"observed_at":"2026-08-05T16:20:23.809183Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:20:23.794724Z","title":null,"venue":null,"work_id":"6a6420aa-9b20-4c43-837d-c8de3907db19","year":2021},"citing_paper":{"arxiv_id":"2508.18737","last_updated":"2025-08-26T07:09:15Z","snapshot_observed_at":"2026-08-06T00:25:36.979671Z","submitted_at":"2025-08-26T07:09:15Z","title":"FLAegis: A Two-Layer Defense Framework for Federated Learning Against Poisoning Attacks","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-05T16:20:23.273583Z"},"links":{"citing_paper":"/paper/2508.18737"},"observation_digest":"sha256:a800bffe401b6051d776c33f5fd691467b03250761323a8fe8de4e9a3e82a938","observation_id":"f313b629-9853-4a0e-b419-37c32c4d5d2a","resolution":{"observed_at":"2026-08-05T16:20:23.797909Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:20:23.784430Z","title":"Fedrdf: A robust and dynamic aggregation function against poisoning attacks in federated learning,","venue":null,"work_id":"d0573c59-d7c2-458e-963b-3da16f2b7610","year":2024},"citing_paper":{"arxiv_id":"2508.18737","last_updated":"2025-08-26T07:09:15Z","snapshot_observed_at":"2026-08-06T00:25:36.979671Z","submitted_at":"2025-08-26T07:09:15Z","title":"FLAegis: A Two-Layer Defense Framework for Federated Learning Against Poisoning Attacks","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-05T16:20:23.277069Z"},"links":{"citing_paper":"/paper/2508.18737"},"observation_digest":"sha256:2017f56c339364e8a5923f54bd5ac7b05d4175cccecc3162c22dc3efc7352630","observation_id":"87d73c1c-515a-4afd-993e-cd3a9d7b6e0d","resolution":{"observed_at":"2026-08-05T16:20:23.788033Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2003.02133","last_updated":"2020-03-04T15:30:10Z","snapshot_observed_at":"2026-07-06T09:02:10.910211Z","submitted_at":"2020-03-04T15:30:10Z","title":"Threats to Federated Learning: A Survey","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2003.02133","snapshot_observed_at":"2026-08-05T16:20:23.280461Z","title":"Threats to federated learning: A survey,","venue":null,"work_id":null,"year":2003},"citing_paper":{"arxiv_id":"2508.18737","last_updated":"2025-08-26T07:09:15Z","snapshot_observed_at":"2026-08-06T00:25:36.979671Z","submitted_at":"2025-08-26T07:09:15Z","title":"FLAegis: A Two-Layer Defense Framework for Federated Learning Against Poisoning Attacks","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-05T16:20:23.280461Z"},"links":{"cited_paper":"/paper/2003.02133","citing_paper":"/paper/2508.18737"},"observation_digest":"sha256:34e42897fe82eba8882868d895fc29c5b518519dc9e2deb99d12e689a66b8486","observation_id":"7b5ef8d4-baa1-4ce1-a1c5-7b73bdf0cf26","resolution":{"observed_at":"2026-08-05T16:20:23.280461Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:20:23.773638Z","title":"Wavelet transform application for/in non-stationary time-series analysis: A re- view,","venue":null,"work_id":"538b2359-77e1-4e22-9b57-052b63207a03","year":2019},"citing_paper":{"arxiv_id":"2508.18737","last_updated":"2025-08-26T07:09:15Z","snapshot_observed_at":"2026-08-06T00:25:36.979671Z","submitted_at":"2025-08-26T07:09:15Z","title":"FLAegis: A Two-Layer Defense Framework for Federated Learning Against Poisoning Attacks","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-05T16:20:23.284290Z"},"links":{"citing_paper":"/paper/2508.18737"},"observation_digest":"sha256:599a9f23d87435f815370126c688f2957aa4a3cd4a94f6c3dc2e21a0c2e510e6","observation_id":"64142875-b930-4b86-b09e-e68e2945c6d3","resolution":{"observed_at":"2026-08-05T16:20:23.778098Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:20:23.762818Z","title":"Discrete wavelet transform-based time series analysis and mining,","venue":null,"work_id":"73e73224-07f7-4976-a436-afbc71c43127","year":2011},"citing_paper":{"arxiv_id":"2508.18737","last_updated":"2025-08-26T07:09:15Z","snapshot_observed_at":"2026-08-06T00:25:36.979671Z","submitted_at":"2025-08-26T07:09:15Z","title":"FLAegis: A Two-Layer Defense Framework for Federated Learning Against Poisoning Attacks","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-05T16:20:23.288057Z"},"links":{"citing_paper":"/paper/2508.18737"},"observation_digest":"sha256:be469d220f4601877f5d09a4bc019f52835ae0db79165dea08a60d21b9ff1659","observation_id":"63bef37c-27ba-445b-80d5-ce5a43784291","resolution":{"observed_at":"2026-08-05T16:20:23.766564Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:20:23.752604Z","title":"Beats: Blocks of eigenvalues algorithm for time series segmentation,","venue":null,"work_id":"80decce6-cc71-4fe5-ad8d-2db3b992af65","year":2051},"citing_paper":{"arxiv_id":"2508.18737","last_updated":"2025-08-26T07:09:15Z","snapshot_observed_at":"2026-08-06T00:25:36.979671Z","submitted_at":"2025-08-26T07:09:15Z","title":"FLAegis: A Two-Layer Defense Framework for Federated Learning Against Poisoning Attacks","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-05T16:20:23.291606Z"},"links":{"citing_paper":"/paper/2508.18737"},"observation_digest":"sha256:ab399b6256359e762358e77a5a89cf561252393a9d4debbc235a40ed3fa91383","observation_id":"a93b9fb8-c63a-40be-a418-712d02c0c669","resolution":{"observed_at":"2026-08-05T16:20:23.756069Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:20:23.742039Z","title":"Multibeats: Blocks of eigenvalues algorithm for multivariate time series dimension- ality reduction,","venue":null,"work_id":"7ced8fce-b4cd-414b-a416-cbedbec0feef","year":2024},"citing_paper":{"arxiv_id":"2508.18737","last_updated":"2025-08-26T07:09:15Z","snapshot_observed_at":"2026-08-06T00:25:36.979671Z","submitted_at":"2025-08-26T07:09:15Z","title":"FLAegis: A Two-Layer Defense Framework for Federated Learning Against Poisoning Attacks","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-05T16:20:23.295140Z"},"links":{"citing_paper":"/paper/2508.18737"},"observation_digest":"sha256:f5de7277cc3ae30d715be20170f4bd9e87a7615f45ceb13c46ce7c48ab3ab9a4","observation_id":"26dd89fb-107e-46de-b749-3d8cda4c060c","resolution":{"observed_at":"2026-08-05T16:20:23.745999Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:20:23.731870Z","title":"Dimensionality reduction for fast similarity search in large time series databases,","venue":null,"work_id":"18ab07fb-4baf-4587-b691-411b396fac5d","year":2001},"citing_paper":{"arxiv_id":"2508.18737","last_updated":"2025-08-26T07:09:15Z","snapshot_observed_at":"2026-08-06T00:25:36.979671Z","submitted_at":"2025-08-26T07:09:15Z","title":"FLAegis: A Two-Layer Defense Framework for Federated Learning Against Poisoning Attacks","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-05T16:20:23.298894Z"},"links":{"citing_paper":"/paper/2508.18737"},"observation_digest":"sha256:b1396222dae425c3251ac48d33d748f5f594d7608c35223b406785506f4bed74","observation_id":"c774bb3f-b250-4290-9697-f47bd441b0d1","resolution":{"observed_at":"2026-08-05T16:20:23.735381Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:20:23.721796Z","title":"Least squares quantization in pcm,","venue":null,"work_id":"e3dab53b-2098-4da3-9009-b5ab1fd7d90a","year":1982},"citing_paper":{"arxiv_id":"2508.18737","last_updated":"2025-08-26T07:09:15Z","snapshot_observed_at":"2026-08-06T00:25:36.979671Z","submitted_at":"2025-08-26T07:09:15Z","title":"FLAegis: A Two-Layer Defense Framework for Federated Learning Against Poisoning Attacks","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-05T16:20:23.302297Z"},"links":{"citing_paper":"/paper/2508.18737"},"observation_digest":"sha256:d7bc073485767dbdd53c7edb23c4599c48c03f3d07c38059d7317b159e7bcacf","observation_id":"bd19dd00-c828-40ef-b1ab-c1f25f5065b5","resolution":{"observed_at":"2026-08-05T16:20:23.725299Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:20:23.710402Z","title":"Gaussian mixture models,","venue":null,"work_id":"da76aa1b-c876-45ef-9001-7097e9c38f12","year":2015},"citing_paper":{"arxiv_id":"2508.18737","last_updated":"2025-08-26T07:09:15Z","snapshot_observed_at":"2026-08-06T00:25:36.979671Z","submitted_at":"2025-08-26T07:09:15Z","title":"FLAegis: A Two-Layer Defense Framework for Federated Learning Against Poisoning Attacks","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-05T16:20:23.305627Z"},"links":{"citing_paper":"/paper/2508.18737"},"observation_digest":"sha256:4f25619d01a3269a9127c71951820c39789168517d604ef6ed8af2288e54e8c6","observation_id":"db17e440-12df-414d-b8da-d4e20d53f9d8","resolution":{"observed_at":"2026-08-05T16:20:23.713742Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:20:23.700312Z","title":"Spectral clustering,","venue":null,"work_id":"c8539ae2-2d04-482a-ad0c-87b08a5f2034","year":2018},"citing_paper":{"arxiv_id":"2508.18737","last_updated":"2025-08-26T07:09:15Z","snapshot_observed_at":"2026-08-06T00:25:36.979671Z","submitted_at":"2025-08-26T07:09:15Z","title":"FLAegis: A Two-Layer Defense Framework for Federated Learning Against Poisoning Attacks","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-05T16:20:23.308947Z"},"links":{"citing_paper":"/paper/2508.18737"},"observation_digest":"sha256:de7828e625a7d92c24811b62197b685ef6da073a872a04ea1b43db37b602e325","observation_id":"4a9e022f-a975-4af0-9e80-d91dcddae1b6","resolution":{"observed_at":"2026-08-05T16:20:23.703971Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:20:23.690406Z","title":"A tutorial on spectral clustering,","venue":null,"work_id":"2ac2b6e0-de9b-4c6d-add8-f6bdc6d096ea","year":2007},"citing_paper":{"arxiv_id":"2508.18737","last_updated":"2025-08-26T07:09:15Z","snapshot_observed_at":"2026-08-06T00:25:36.979671Z","submitted_at":"2025-08-26T07:09:15Z","title":"FLAegis: A Two-Layer Defense Framework for Federated Learning Against Poisoning Attacks","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-05T16:20:23.312217Z"},"links":{"citing_paper":"/paper/2508.18737"},"observation_digest":"sha256:3aaadf6016d95b66b5219b4a2b78b5c7480b1d1281560e6f140dc11046760a80","observation_id":"42960f1a-c0c9-4de1-9f9f-951717d56db0","resolution":{"observed_at":"2026-08-05T16:20:23.693674Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:20:23.679738Z","title":"Learning spectral clustering,","venue":null,"work_id":"fea2ada2-1d9a-400d-b62e-e9b8d7e05a69","year":2003},"citing_paper":{"arxiv_id":"2508.18737","last_updated":"2025-08-26T07:09:15Z","snapshot_observed_at":"2026-08-06T00:25:36.979671Z","submitted_at":"2025-08-26T07:09:15Z","title":"FLAegis: A Two-Layer Defense Framework for Federated Learning Against Poisoning Attacks","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-05T16:20:23.315914Z"},"links":{"citing_paper":"/paper/2508.18737"},"observation_digest":"sha256:afb331cf3b7724bb78e470bc05ff2852149287d3d63855d29d9fb96f7b65cf32","observation_id":"2955c048-6ed6-41f2-873b-aa48855b6e93","resolution":{"observed_at":"2026-08-05T16:20:23.683539Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:20:23.670095Z","title":null,"venue":null,"work_id":"dcb7ea28-3cd9-4309-9160-f825d3a3be2d","year":2012},"citing_paper":{"arxiv_id":"2508.18737","last_updated":"2025-08-26T07:09:15Z","snapshot_observed_at":"2026-08-06T00:25:36.979671Z","submitted_at":"2025-08-26T07:09:15Z","title":"FLAegis: A Two-Layer Defense Framework for Federated Learning Against Poisoning Attacks","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-05T16:20:23.319062Z"},"links":{"citing_paper":"/paper/2508.18737"},"observation_digest":"sha256:6edf9a4738d34953ac1207118e9459a37fcb6edf8ff1b56867683a8f3cdf930e","observation_id":"1231c7e1-66fb-4069-a8c1-e02f4f90065f","resolution":{"observed_at":"2026-08-05T16:20:23.673386Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:20:23.659991Z","title":"Byzantine-robust dis- tributed learning: Towards optimal statistical rates,","venue":null,"work_id":"892bf554-dc39-4896-b9f0-329f0e223f5f","year":2018},"citing_paper":{"arxiv_id":"2508.18737","last_updated":"2025-08-26T07:09:15Z","snapshot_observed_at":"2026-08-06T00:25:36.979671Z","submitted_at":"2025-08-26T07:09:15Z","title":"FLAegis: A Two-Layer Defense Framework for Federated Learning Against Poisoning Attacks","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-05T16:20:23.322463Z"},"links":{"citing_paper":"/paper/2508.18737"},"observation_digest":"sha256:caa8d9f0323674c0c6858e1d2d256a4cf70c50aedb36b912ef189b1daecdf2f5","observation_id":"8f3e2de0-af02-4fdf-88df-8645bf7cdc79","resolution":{"observed_at":"2026-08-05T16:20:23.663616Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1808.04866","last_updated":"2020-07-15T15:35:17Z","snapshot_observed_at":"2026-08-06T06:11:20.847532Z","submitted_at":"2018-08-14T19:20:35Z","title":"Mitigating Sybils in Federated Learning Poisoning","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1808.04866","snapshot_observed_at":"2026-08-05T16:20:23.326364Z","title":"Mitigating sybils in federated learning poisoning,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2508.18737","last_updated":"2025-08-26T07:09:15Z","snapshot_observed_at":"2026-08-06T00:25:36.979671Z","submitted_at":"2025-08-26T07:09:15Z","title":"FLAegis: A Two-Layer Defense Framework for Federated Learning Against Poisoning Attacks","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-05T16:20:23.326364Z"},"links":{"cited_paper":"/paper/1808.04866","citing_paper":"/paper/2508.18737"},"observation_digest":"sha256:4fffb1824405f773b0f9505b2bc6afa0b96b024ae0790644ddc170c330784b9d","observation_id":"6b0bb8f5-f2eb-49f5-bd66-87ce00e78300","resolution":{"observed_at":"2026-08-05T16:20:23.326364Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2012.13995","last_updated":"2022-04-12T01:56:47Z","snapshot_observed_at":"2026-07-06T10:28:06.533127Z","submitted_at":"2020-12-27T18:43:39Z","title":"FLTrust: Byzantine-robust Federated Learning via Trust Bootstrapping","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2012.13995","snapshot_observed_at":"2026-08-05T16:20:23.330213Z","title":"Fltrust: Byzantine- robust federated learning via trust bootstrapping,","venue":null,"work_id":null,"year":2012},"citing_paper":{"arxiv_id":"2508.18737","last_updated":"2025-08-26T07:09:15Z","snapshot_observed_at":"2026-08-06T00:25:36.979671Z","submitted_at":"2025-08-26T07:09:15Z","title":"FLAegis: A Two-Layer Defense Framework for Federated Learning Against Poisoning Attacks","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-05T16:20:23.330213Z"},"links":{"cited_paper":"/paper/2012.13995","citing_paper":"/paper/2508.18737"},"observation_digest":"sha256:4046284211e5ce6e5f5524d5047fe2c528cd53fec20371933bafad259bdb208b","observation_id":"bbf413fc-ed2e-4818-8584-667e88063656","resolution":{"observed_at":"2026-08-05T16:20:23.330213Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2002.00211","last_updated":"2020-02-01T14:09:48Z","snapshot_observed_at":"2026-07-06T08:54:14.623788Z","submitted_at":"2020-02-01T14:09:48Z","title":"Learning to Detect Malicious Clients for Robust Federated Learning","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2002.00211","snapshot_observed_at":"2026-08-05T16:20:23.334034Z","title":"Learning to de- tect malicious clients for robust federated learning,","venue":null,"work_id":null,"year":2002},"citing_paper":{"arxiv_id":"2508.18737","last_updated":"2025-08-26T07:09:15Z","snapshot_observed_at":"2026-08-06T00:25:36.979671Z","submitted_at":"2025-08-26T07:09:15Z","title":"FLAegis: A Two-Layer Defense Framework for Federated Learning Against Poisoning Attacks","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-05T16:20:23.334034Z"},"links":{"cited_paper":"/paper/2002.00211","citing_paper":"/paper/2508.18737"},"observation_digest":"sha256:f9ae032ba0f8f766b1bb40fe71d4c56623d2984ce585e47cc69389c99561f2b7","observation_id":"4bdafc3c-fe5c-4bc3-9770-019cd40190f2","resolution":{"observed_at":"2026-08-05T16:20:23.334034Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:20:23.650050Z","title":"Fldetector: Defending federated learning against model poisoning attacks via detecting ma- licious clients,","venue":null,"work_id":"da92ca2d-5ad8-4094-ac84-03cbfb0de876","year":2022},"citing_paper":{"arxiv_id":"2508.18737","last_updated":"2025-08-26T07:09:15Z","snapshot_observed_at":"2026-08-06T00:25:36.979671Z","submitted_at":"2025-08-26T07:09:15Z","title":"FLAegis: A Two-Layer Defense Framework for Federated Learning Against Poisoning Attacks","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-05T16:20:23.337706Z"},"links":{"citing_paper":"/paper/2508.18737"},"observation_digest":"sha256:cb1a2a15aa2c4d4a7298f05a0e7702288bcb23d44ad0968f13285f3b22688301","observation_id":"32260704-5f17-494c-a07d-080789b5bf11","resolution":{"observed_at":"2026-08-05T16:20:23.653677Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2310.08097","last_updated":"2024-09-04T08:27:17Z","snapshot_observed_at":"2026-08-03T13:46:08.885191Z","submitted_at":"2023-10-12T07:45:18Z","title":"Sentinel: An Aggregation Function to Secure Decentralized Federated Learning","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.08097","snapshot_observed_at":"2026-08-05T16:20:23.341029Z","title":"Sentinel: An aggregation function to secure decentralized federated learning,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.18737","last_updated":"2025-08-26T07:09:15Z","snapshot_observed_at":"2026-08-06T00:25:36.979671Z","submitted_at":"2025-08-26T07:09:15Z","title":"FLAegis: A Two-Layer Defense Framework for Federated Learning Against Poisoning Attacks","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-05T16:20:23.341029Z"},"links":{"cited_paper":"/paper/2310.08097","citing_paper":"/paper/2508.18737"},"observation_digest":"sha256:d10208972c1a286b5a077799df542bab0728db33ae80df5620093ae211512d50","observation_id":"1468ceec-54b1-4361-b304-a23d3f116390","resolution":{"observed_at":"2026-08-05T16:20:23.341029Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:20:23.640443Z","title":"Lomar: A local defense against poisoning attack on federated learning,","venue":null,"work_id":"c94d10a5-d164-4982-a5bf-81562d2df55e","year":2021},"citing_paper":{"arxiv_id":"2508.18737","last_updated":"2025-08-26T07:09:15Z","snapshot_observed_at":"2026-08-06T00:25:36.979671Z","submitted_at":"2025-08-26T07:09:15Z","title":"FLAegis: A Two-Layer Defense Framework for Federated Learning Against Poisoning Attacks","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-05T16:20:23.344530Z"},"links":{"citing_paper":"/paper/2508.18737"},"observation_digest":"sha256:2332d56c1a91c0d9d5c5586098fb0eb44d43a128c76280b85b331debfdbd7c4d","observation_id":"7fda1ab3-96ea-4943-ab5a-3a8a38bc3dff","resolution":{"observed_at":"2026-08-05T16:20:23.643991Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:20:23.629574Z","title":"Feddmc: Efficient and robust federated learning via detecting malicious clients,","venue":null,"work_id":"7ccbb1bd-a401-42a2-bc6e-6d848861c794","year":2024},"citing_paper":{"arxiv_id":"2508.18737","last_updated":"2025-08-26T07:09:15Z","snapshot_observed_at":"2026-08-06T00:25:36.979671Z","submitted_at":"2025-08-26T07:09:15Z","title":"FLAegis: A Two-Layer Defense Framework for Federated Learning Against Poisoning Attacks","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-05T16:20:23.347686Z"},"links":{"citing_paper":"/paper/2508.18737"},"observation_digest":"sha256:0dd8c2239f7441bcab64213f37ee87606614526b54b4c49ac65d8adc169a7455","observation_id":"2a4c808a-a298-4864-a3d0-3602aa68a380","resolution":{"observed_at":"2026-08-05T16:20:23.633585Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:20:23.618456Z","title":"Byzantine-robust federated learning through collaborative malicious gradient filtering,","venue":null,"work_id":"1e0387d8-1d47-4c30-b071-644ba16969bf","year":2022},"citing_paper":{"arxiv_id":"2508.18737","last_updated":"2025-08-26T07:09:15Z","snapshot_observed_at":"2026-08-06T00:25:36.979671Z","submitted_at":"2025-08-26T07:09:15Z","title":"FLAegis: A Two-Layer Defense Framework for Federated Learning Against Poisoning Attacks","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-05T16:20:23.350732Z"},"links":{"citing_paper":"/paper/2508.18737"},"observation_digest":"sha256:bcf2c9c893ccf642a38424e7ea762df8f3a3c8b8eef1ab21f0d72c01292ef5f0","observation_id":"1e00fb4c-97fe-48c3-ad79-66d8edfac3e8","resolution":{"observed_at":"2026-08-05T16:20:23.622099Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2204.13256","last_updated":"2023-08-07T07:31:46Z","snapshot_observed_at":"2026-08-06T02:41:37.694015Z","submitted_at":"2022-04-28T02:22:53Z","title":"Shielding Federated Learning: Robust Aggregation with Adaptive Client Selection","version":4},"cited_work":{"arxiv_id":"2204.13256","doi":null,"metadata_source":"pith","pith_arxiv_id":"2204.13256","snapshot_observed_at":"2026-08-05T16:20:23.458125Z","title":"Shielding Federated Learning: Robust Aggregation with Adaptive Client Selection","venue":"cs.CR","work_id":"3ed3b195-8836-4160-8445-efc49fd8b0cc","year":2022},"citing_paper":{"arxiv_id":"2508.18737","last_updated":"2025-08-26T07:09:15Z","snapshot_observed_at":"2026-08-06T00:25:36.979671Z","submitted_at":"2025-08-26T07:09:15Z","title":"FLAegis: A Two-Layer Defense Framework for Federated Learning Against Poisoning Attacks","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-05T16:20:23.354912Z"},"links":{"cited_paper":"/paper/2204.13256","citing_paper":"/paper/2508.18737"},"observation_digest":"sha256:7dc3a3ad38bb66d4892c690305f2cfd15c50c4340024889230486d91da650d9e","observation_id":"08270032-b270-469e-9116-774d70adf632","resolution":{"observed_at":"2026-08-05T16:20:23.464015Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:20:23.607487Z","title":"The sybil attack,","venue":null,"work_id":"c3ada0c7-3c69-426f-8dcf-5fc77cb124d5","year":2002},"citing_paper":{"arxiv_id":"2508.18737","last_updated":"2025-08-26T07:09:15Z","snapshot_observed_at":"2026-08-06T00:25:36.979671Z","submitted_at":"2025-08-26T07:09:15Z","title":"FLAegis: A Two-Layer Defense Framework for Federated Learning Against Poisoning Attacks","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-05T16:20:23.358725Z"},"links":{"citing_paper":"/paper/2508.18737"},"observation_digest":"sha256:805478db76963467e5b49d4fa6b14609fe0e57f6ac29cfae2e81d7f2bd484445","observation_id":"1e13b958-5973-499b-bb5f-69487489e97d","resolution":{"observed_at":"2026-08-05T16:20:23.611088Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:20:23.595690Z","title":"Fully decentralized federated learning,","venue":null,"work_id":"8d40408e-e04f-4e55-b1dd-7ae417cd48d7","year":2018},"citing_paper":{"arxiv_id":"2508.18737","last_updated":"2025-08-26T07:09:15Z","snapshot_observed_at":"2026-08-06T00:25:36.979671Z","submitted_at":"2025-08-26T07:09:15Z","title":"FLAegis: A Two-Layer Defense Framework for Federated Learning Against Poisoning Attacks","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-05T16:20:23.362119Z"},"links":{"citing_paper":"/paper/2508.18737"},"observation_digest":"sha256:52feca2f1490e84ed733b67d99d69f5db86721adc90b0a4580691f86727313f0","observation_id":"b0345689-8b3b-4463-a97e-93abe1a1d322","resolution":{"observed_at":"2026-08-05T16:20:23.599994Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:20:23.584247Z","title":"Back to the drawing board: A critical evaluation of poisoning attacks on production federated learning,","venue":null,"work_id":"2273f059-8298-4bd7-97c7-8b9caa351edf","year":2022},"citing_paper":{"arxiv_id":"2508.18737","last_updated":"2025-08-26T07:09:15Z","snapshot_observed_at":"2026-08-06T00:25:36.979671Z","submitted_at":"2025-08-26T07:09:15Z","title":"FLAegis: A Two-Layer Defense Framework for Federated Learning Against Poisoning Attacks","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-05T16:20:23.365607Z"},"links":{"citing_paper":"/paper/2508.18737"},"observation_digest":"sha256:9ff504abdd93e1255f12bf25379cd5cc04c1e4a048bcd03bc021251ac4e37454","observation_id":"0008192c-8c78-465d-993c-59221b284f48","resolution":{"observed_at":"2026-08-05T16:20:23.588165Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:20:23.571421Z","title":"A little is enough: Circumvent- ing defenses for distributed learning,","venue":null,"work_id":"828bf642-9e41-4178-91e7-9dcf66aa5146","year":2019},"citing_paper":{"arxiv_id":"2508.18737","last_updated":"2025-08-26T07:09:15Z","snapshot_observed_at":"2026-08-06T00:25:36.979671Z","submitted_at":"2025-08-26T07:09:15Z","title":"FLAegis: A Two-Layer Defense Framework for Federated Learning Against Poisoning Attacks","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-05T16:20:23.368967Z"},"links":{"citing_paper":"/paper/2508.18737"},"observation_digest":"sha256:c416950c715dbfc185dc40700ee919f48ac059c0426b799124f9de55d47b4f82","observation_id":"e3283ec4-26ce-46ef-a250-138694173d90","resolution":{"observed_at":"2026-08-05T16:20:23.575820Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2007.14390","last_updated":"2022-03-05T20:30:32Z","snapshot_observed_at":"2026-07-06T09:42:35.058716Z","submitted_at":"2020-07-28T17:59:07Z","title":"Flower: A Friendly Federated Learning Research Framework","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2007.14390","snapshot_observed_at":"2026-08-05T16:20:23.372278Z","title":"Flower: A friendly federated learning research framework,","venue":null,"work_id":null,"year":2007},"citing_paper":{"arxiv_id":"2508.18737","last_updated":"2025-08-26T07:09:15Z","snapshot_observed_at":"2026-08-06T00:25:36.979671Z","submitted_at":"2025-08-26T07:09:15Z","title":"FLAegis: A Two-Layer Defense Framework for Federated Learning Against Poisoning Attacks","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-05T16:20:23.372278Z"},"links":{"cited_paper":"/paper/2007.14390","citing_paper":"/paper/2508.18737"},"observation_digest":"sha256:7dbb0d602d42c5a7b594d0bb360cf9868566c9c4923520a93d4551770a6e1e11","observation_id":"1881814b-3e7c-403f-b10f-579b6d34383b","resolution":{"observed_at":"2026-08-05T16:20:23.372278Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:20:23.560928Z","title":"Emnist: Extending mnist to handwritten letters,","venue":null,"work_id":"3d583874-7950-4e62-808e-a64095360d4d","year":2017},"citing_paper":{"arxiv_id":"2508.18737","last_updated":"2025-08-26T07:09:15Z","snapshot_observed_at":"2026-08-06T00:25:36.979671Z","submitted_at":"2025-08-26T07:09:15Z","title":"FLAegis: A Two-Layer Defense Framework for Federated Learning Against Poisoning Attacks","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-05T16:20:23.376122Z"},"links":{"citing_paper":"/paper/2508.18737"},"observation_digest":"sha256:6fac1947dcadbfe5fa35f9c571fe44c490a3159339bfddb6fd77928e1fa08e0e","observation_id":"808826a2-3f88-4789-b1f1-d1a1b2008698","resolution":{"observed_at":"2026-08-05T16:20:23.564285Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1812.01097","last_updated":"2019-12-09T20:02:37Z","snapshot_observed_at":"2026-08-06T00:22:10.318064Z","submitted_at":"2018-12-03T21:59:41Z","title":"LEAF: A Benchmark for Federated Settings","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1812.01097","snapshot_observed_at":"2026-08-05T16:20:23.380270Z","title":"Leaf: A benchmark for federated settings,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2508.18737","last_updated":"2025-08-26T07:09:15Z","snapshot_observed_at":"2026-08-06T00:25:36.979671Z","submitted_at":"2025-08-26T07:09:15Z","title":"FLAegis: A Two-Layer Defense Framework for Federated Learning Against Poisoning Attacks","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-05T16:20:23.380270Z"},"links":{"cited_paper":"/paper/1812.01097","citing_paper":"/paper/2508.18737"},"observation_digest":"sha256:20cad349d9c6ab3dfd19a7bd429987717d1ee648f1b724f32cf2299523f092e7","observation_id":"4cbee77e-8b8c-4a68-b685-1ab839bde23c","resolution":{"observed_at":"2026-08-05T16:20:23.380270Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:20:23.551044Z","title":"Entropy estimates of small data sets,","venue":null,"work_id":"632c4b2a-9e4b-403e-8857-d1c7a861cd31","year":2008},"citing_paper":{"arxiv_id":"2508.18737","last_updated":"2025-08-26T07:09:15Z","snapshot_observed_at":"2026-08-06T00:25:36.979671Z","submitted_at":"2025-08-26T07:09:15Z","title":"FLAegis: A Two-Layer Defense Framework for Federated Learning Against Poisoning Attacks","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-05T16:20:23.383986Z"},"links":{"citing_paper":"/paper/2508.18737"},"observation_digest":"sha256:fb54b0241087aa54f96db0b5a126d1ab15edfaf9fb31dbbace34213949303e89","observation_id":"1abdb28c-441c-4ffc-84f8-7bbe8db205fa","resolution":{"observed_at":"2026-08-05T16:20:23.554368Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:20:23.540638Z","title":"Sageflow: Robust federated learning against both stragglers and adversaries,","venue":null,"work_id":"b5502abe-f9ae-4b8a-bf79-568efc8ed389","year":2021},"citing_paper":{"arxiv_id":"2508.18737","last_updated":"2025-08-26T07:09:15Z","snapshot_observed_at":"2026-08-06T00:25:36.979671Z","submitted_at":"2025-08-26T07:09:15Z","title":"FLAegis: A Two-Layer Defense Framework for Federated Learning Against Poisoning Attacks","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-05T16:20:23.388199Z"},"links":{"citing_paper":"/paper/2508.18737"},"observation_digest":"sha256:10423c1974e27b2dd85fe8c29b21d864f6b2992de5a5516425edafe24c0355fc","observation_id":"bf324a23-5d54-469d-ad5b-a8c8b1690282","resolution":{"observed_at":"2026-08-05T16:20:23.544099Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:20:23.530362Z","title":"Trojdrl: evaluation of back- door attacks on deep reinforcement learning,","venue":null,"work_id":"397917e0-208d-442a-9ae7-84936909a92f","year":2020},"citing_paper":{"arxiv_id":"2508.18737","last_updated":"2025-08-26T07:09:15Z","snapshot_observed_at":"2026-08-06T00:25:36.979671Z","submitted_at":"2025-08-26T07:09:15Z","title":"FLAegis: A Two-Layer Defense Framework for Federated Learning Against Poisoning Attacks","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-05T16:20:23.391555Z"},"links":{"citing_paper":"/paper/2508.18737"},"observation_digest":"sha256:19d6a609c628da43793b991a88c2b2bf0a43b7270365807b3c5c48c4047ed635","observation_id":"9ab789eb-755b-4c16-95ed-704b4bbe9b2b","resolution":{"observed_at":"2026-08-05T16:20:23.534060Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2006.09365","last_updated":"2023-11-22T09:08:15Z","snapshot_observed_at":"2026-07-06T09:29:45.475911Z","submitted_at":"2020-06-16T17:58:53Z","title":"Byzantine-Robust Learning on Heterogeneous Datasets via Bucketing","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2006.09365","snapshot_observed_at":"2026-08-05T16:20:23.394900Z","title":"Byzantine-robust learning on heterogeneous datasets via bucketing,","venue":null,"work_id":null,"year":2006},"citing_paper":{"arxiv_id":"2508.18737","last_updated":"2025-08-26T07:09:15Z","snapshot_observed_at":"2026-08-06T00:25:36.979671Z","submitted_at":"2025-08-26T07:09:15Z","title":"FLAegis: A Two-Layer Defense Framework for Federated Learning Against Poisoning Attacks","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-05T16:20:23.394900Z"},"links":{"cited_paper":"/paper/2006.09365","citing_paper":"/paper/2508.18737"},"observation_digest":"sha256:430c291e4633426c6d212cb371bf2ee3b91a61e326a05e239bcdfbee29b777c2","observation_id":"cbcaf4ec-d996-48ae-89ca-58a22d56fa55","resolution":{"observed_at":"2026-08-05T16:20:23.394900Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T16:20:23.520019Z","title":"Manipulating the byzantine: Opti- mizing model poisoning attacks and defenses for federated learning,","venue":null,"work_id":"3c6b1159-1a1a-4311-aae5-5019187617ec","year":2021},"citing_paper":{"arxiv_id":"2508.18737","last_updated":"2025-08-26T07:09:15Z","snapshot_observed_at":"2026-08-06T00:25:36.979671Z","submitted_at":"2025-08-26T07:09:15Z","title":"FLAegis: A Two-Layer Defense Framework for Federated Learning Against Poisoning Attacks","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-05T16:20:23.398486Z"},"links":{"citing_paper":"/paper/2508.18737"},"observation_digest":"sha256:8d932ba8f85f58a4ae714d045c484acf289b4f4a05d58d8d649fbfafaf12f5bb","observation_id":"4cf9adc4-b4d3-4643-bfe8-19b8bcc4ff0e","resolution":{"observed_at":"2026-08-05T16:20:23.523759Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2508.18737","last_updated":"2025-08-26T07:09:15Z","latest_version":1,"primary_category":"cs.LG","snapshot_observed_at":"2026-08-06T00:25:36.979671Z","submitted_at":"2025-08-26T07:09:15Z","title":"FLAegis: A Two-Layer Defense Framework for Federated Learning Against Poisoning Attacks"},"reference_resolution":{"displayed":48,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":13,"verified_exact":1,"verified_fuzzy":34},"total_outbound_references":48},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"thesis":"As of 6 August 2026, this Paper Citation Record lists 48 of 48 outbound references and 0 inbound Pith citation observations for arXiv:2508.18737."}