{"as_of":"2026-08-10T09:27:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:8781079aee22a71bcbf3dbc75212fbfb14f6ec4c78f4b6b6de1c7a9ad7068ce2","coverage":[{"denominator":24,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":24,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-05T11:12:08.373380Z","state":"measured"},{"denominator":24,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":24,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-10T06:31:04.303077+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2509.03108/citation-record","integrity":"/paper/2509.03108/integrity","json":"/paper/2509.03108/citation-record.json","paper":"/paper/2509.03108"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T11:12:12.483877Z","title":"Li and A","venue":null,"work_id":"a61d2ee8-2558-4d49-8589-d97a55b07f9d","year":2011},"citing_paper":{"arxiv_id":"2509.03108","last_updated":"2025-09-12T10:53:43Z","snapshot_observed_at":"2026-08-05T11:12:04.085150Z","submitted_at":"2025-09-03T08:05:36Z","title":"Backdoor Poisoning Attack Against Face Spoofing Attack Detection Methods","version":2},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-05T11:12:06.496553Z"},"links":{"citing_paper":"/paper/2509.03108"},"observation_digest":"sha256:f0f1b28dc5f03dc587dc576c36fb87b2a4eb994ba700899ebb203a45b96e4143","observation_id":"b05d422a-0b28-480a-8d4d-8dd7631e366b","resolution":{"observed_at":"2026-08-05T11:12:12.530355Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T11:12:06.565399Z","title":"Goodfellow, Y","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2509.03108","last_updated":"2025-09-12T10:53:43Z","snapshot_observed_at":"2026-08-05T11:12:04.085150Z","submitted_at":"2025-09-03T08:05:36Z","title":"Backdoor Poisoning Attack Against Face Spoofing Attack Detection Methods","version":2},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-05T11:12:06.565399Z"},"links":{"citing_paper":"/paper/2509.03108"},"observation_digest":"sha256:c69eee99b4aef8cb989a7a46460fd4565352257eba53bc58ae9e43dd1b00e787","observation_id":"4c2843ab-9bc6-4b1e-86c5-35a5246734c0","resolution":{"observed_at":"2026-08-05T11:12:06.565399Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T11:12:12.349613Z","title":"Marcel, M","venue":null,"work_id":"58df2978-0753-4540-b512-083348b5dd2b","year":2019},"citing_paper":{"arxiv_id":"2509.03108","last_updated":"2025-09-12T10:53:43Z","snapshot_observed_at":"2026-08-05T11:12:04.085150Z","submitted_at":"2025-09-03T08:05:36Z","title":"Backdoor Poisoning Attack Against Face Spoofing Attack Detection Methods","version":2},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-05T11:12:06.659633Z"},"links":{"citing_paper":"/paper/2509.03108"},"observation_digest":"sha256:467605d2de4d096a6f62d9a0b88c035aef1998abc4257eb105f3579c6b79a882","observation_id":"cbbb2048-3df1-4408-8eeb-0939c5004ba5","resolution":{"observed_at":"2026-08-05T11:12:12.426731Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T11:12:12.113989Z","title":"An image is worth 16x16 words: Transformers for image recognition at scale,","venue":null,"work_id":"25156aa6-771b-470d-8c8b-bd8cd5cdfcf3","year":2021},"citing_paper":{"arxiv_id":"2509.03108","last_updated":"2025-09-12T10:53:43Z","snapshot_observed_at":"2026-08-05T11:12:04.085150Z","submitted_at":"2025-09-03T08:05:36Z","title":"Backdoor Poisoning Attack Against Face Spoofing Attack Detection Methods","version":2},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-05T11:12:06.732947Z"},"links":{"citing_paper":"/paper/2509.03108"},"observation_digest":"sha256:054bb2475506da77f61ae61ce16fb013df5925cd5b10a9e771a8d8a96a806724","observation_id":"a8ad1a47-7f84-4f8a-a304-5d5f8e56068a","resolution":{"observed_at":"2026-08-05T11:12:12.248479Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T11:12:11.893816Z","title":"Learning deep models fo r face anti-spoofing: Binary or auxiliary supervision,","venue":null,"work_id":"4abff913-dd3e-4792-99a5-0c3ff70273f8","year":2018},"citing_paper":{"arxiv_id":"2509.03108","last_updated":"2025-09-12T10:53:43Z","snapshot_observed_at":"2026-08-05T11:12:04.085150Z","submitted_at":"2025-09-03T08:05:36Z","title":"Backdoor Poisoning Attack Against Face Spoofing Attack Detection Methods","version":2},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-05T11:12:06.795785Z"},"links":{"citing_paper":"/paper/2509.03108"},"observation_digest":"sha256:d530538737f4c484a725dfc034730a0dc959c0a2f5b8ebbf06ce0d4949c1b0be","observation_id":"bc34e561-d9d7-47f1-b4d8-fad1183470db","resolution":{"observed_at":"2026-08-05T11:12:11.999564Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T11:12:11.650512Z","title":"On disentangling spoof trace for generic face anti-spoofing,","venue":null,"work_id":"20ea7618-2ec3-41bd-9d0b-3986cab564f6","year":2020},"citing_paper":{"arxiv_id":"2509.03108","last_updated":"2025-09-12T10:53:43Z","snapshot_observed_at":"2026-08-05T11:12:04.085150Z","submitted_at":"2025-09-03T08:05:36Z","title":"Backdoor Poisoning Attack Against Face Spoofing Attack Detection Methods","version":2},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-05T11:12:06.897131Z"},"links":{"citing_paper":"/paper/2509.03108"},"observation_digest":"sha256:9f81c773cabe4f5ff63b26b66cff77eb29db4cedbc5a731df8fa97af3c922a77","observation_id":"102c1dce-8c5d-43ab-a524-94e753c92d99","resolution":{"observed_at":"2026-08-05T11:12:11.789060Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T11:12:11.407626Z","title":"Deep lear ning for face anti-spoofing: A survey,","venue":null,"work_id":"aaef8302-2e62-4ecd-a22a-36ef21daf04a","year":2023},"citing_paper":{"arxiv_id":"2509.03108","last_updated":"2025-09-12T10:53:43Z","snapshot_observed_at":"2026-08-05T11:12:04.085150Z","submitted_at":"2025-09-03T08:05:36Z","title":"Backdoor Poisoning Attack Against Face Spoofing Attack Detection Methods","version":2},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-05T11:12:06.995590Z"},"links":{"citing_paper":"/paper/2509.03108"},"observation_digest":"sha256:450c95975b5d7ccf6b3e320bce463269bf6b468d25076dda7877c294718ef447","observation_id":"002f2103-ef86-46db-ab28-ddcb2f27fc36","resolution":{"observed_at":"2026-08-05T11:12:11.519288Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T11:12:11.146476Z","title":"Badnets: Eva luating backdooring attacks on deep neural networks,","venue":null,"work_id":"31af4395-043f-4afb-b57d-80ce02f66ad8","year":2019},"citing_paper":{"arxiv_id":"2509.03108","last_updated":"2025-09-12T10:53:43Z","snapshot_observed_at":"2026-08-05T11:12:04.085150Z","submitted_at":"2025-09-03T08:05:36Z","title":"Backdoor Poisoning Attack Against Face Spoofing Attack Detection Methods","version":2},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-05T11:12:07.097465Z"},"links":{"citing_paper":"/paper/2509.03108"},"observation_digest":"sha256:eeb2f2451a212620c86480b8c74ef7f921b9deaa568d97c698cdfb98e8bc3a97","observation_id":"b4b50dbf-270a-4161-8a03-1b3679830c79","resolution":{"observed_at":"2026-08-05T11:12:11.253575Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T11:12:10.960979Z","title":"Trojaning attack on neural networks,","venue":null,"work_id":"0706b727-1f55-422f-9908-ea0d175b0514","year":2018},"citing_paper":{"arxiv_id":"2509.03108","last_updated":"2025-09-12T10:53:43Z","snapshot_observed_at":"2026-08-05T11:12:04.085150Z","submitted_at":"2025-09-03T08:05:36Z","title":"Backdoor Poisoning Attack Against Face Spoofing Attack Detection Methods","version":2},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-05T11:12:07.169314Z"},"links":{"citing_paper":"/paper/2509.03108"},"observation_digest":"sha256:56bfe347be9a57941455e05af745b234da6284d64a3d49b9a0f21492bacd8109","observation_id":"7d8bc5ab-10e9-4279-9830-a901a3149622","resolution":{"observed_at":"2026-08-05T11:12:11.100085Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T11:12:10.746058Z","title":"Backdoor learning : A survey,","venue":null,"work_id":"d9e21e8f-c398-46b5-9937-4d783e0abe5e","year":2022},"citing_paper":{"arxiv_id":"2509.03108","last_updated":"2025-09-12T10:53:43Z","snapshot_observed_at":"2026-08-05T11:12:04.085150Z","submitted_at":"2025-09-03T08:05:36Z","title":"Backdoor Poisoning Attack Against Face Spoofing Attack Detection Methods","version":2},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-05T11:12:07.267412Z"},"links":{"citing_paper":"/paper/2509.03108"},"observation_digest":"sha256:00cd463b55c23204cc8c42958eaf9b75a6347c11b4f80ec477e60cce92952850","observation_id":"ccc9531c-0d27-4572-9524-ba5b74bc0792","resolution":{"observed_at":"2026-08-05T11:12:10.844621Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T11:12:10.605739Z","title":"A compr ehensive survey on backdoor attacks and their defenses in face recogn ition systems,","venue":null,"work_id":"327b6db4-172b-4299-97cb-cb4ab53e2646","year":2023},"citing_paper":{"arxiv_id":"2509.03108","last_updated":"2025-09-12T10:53:43Z","snapshot_observed_at":"2026-08-05T11:12:04.085150Z","submitted_at":"2025-09-03T08:05:36Z","title":"Backdoor Poisoning Attack Against Face Spoofing Attack Detection Methods","version":2},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-05T11:12:07.371655Z"},"links":{"citing_paper":"/paper/2509.03108"},"observation_digest":"sha256:6a990f4797b48dbf5040520ec2c37a8a71528ccaf694e59cb09af1b8846a47ef","observation_id":"f54fa945-b940-405c-95d6-4d329ad8094e","resolution":{"observed_at":"2026-08-05T11:12:10.672808Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T11:12:10.434400Z","title":"Face image de-identifica tion based on feature embedding for privacy protection,","venue":null,"work_id":"6e7c143e-94fa-4c7d-8183-345ba628aa6c","year":2023},"citing_paper":{"arxiv_id":"2509.03108","last_updated":"2025-09-12T10:53:43Z","snapshot_observed_at":"2026-08-05T11:12:04.085150Z","submitted_at":"2025-09-03T08:05:36Z","title":"Backdoor Poisoning Attack Against Face Spoofing Attack Detection Methods","version":2},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-05T11:12:07.477963Z"},"links":{"citing_paper":"/paper/2509.03108"},"observation_digest":"sha256:fc7bb5671eb07788fc533dd21d11c377ed4e5d0da41bead7ced35bf9645eede5","observation_id":"382bded9-af45-4f4c-9b1f-bacd997cceea","resolution":{"observed_at":"2026-08-05T11:12:10.515974Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T11:12:10.238522Z","title":"Face image de-identifica tion based on feature embedding,","venue":null,"work_id":"a85da195-b7fa-4f93-9bb9-38fba4aa2743","year":2024},"citing_paper":{"arxiv_id":"2509.03108","last_updated":"2025-09-12T10:53:43Z","snapshot_observed_at":"2026-08-05T11:12:04.085150Z","submitted_at":"2025-09-03T08:05:36Z","title":"Backdoor Poisoning Attack Against Face Spoofing Attack Detection Methods","version":2},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-05T11:12:07.579492Z"},"links":{"citing_paper":"/paper/2509.03108"},"observation_digest":"sha256:e504ae2967e1e16e486ab78ef5a729e52d4e0f6b29d70ac498e8d23b8d2626da","observation_id":"4e7c4ca1-646e-46d2-900b-88ab7fba969e","resolution":{"observed_at":"2026-08-05T11:12:10.345411Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T11:12:10.091824Z","title":"OULU-NPU: A mobile face presentation attack database with real- world variations,","venue":null,"work_id":"7d556d2a-92cd-400c-8d61-5c537e8b2e92","year":2017},"citing_paper":{"arxiv_id":"2509.03108","last_updated":"2025-09-12T10:53:43Z","snapshot_observed_at":"2026-08-05T11:12:04.085150Z","submitted_at":"2025-09-03T08:05:36Z","title":"Backdoor Poisoning Attack Against Face Spoofing Attack Detection Methods","version":2},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-05T11:12:07.654398Z"},"links":{"citing_paper":"/paper/2509.03108"},"observation_digest":"sha256:c63956b7d065b18ea301dbfd560eaf3cb76ac4d7a444616f1f2fbe0b86f51a1f","observation_id":"e970194e-d069-4714-86b3-022ea6653cbe","resolution":{"observed_at":"2026-08-05T11:12:10.174932Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T11:12:09.917663Z","title":"Towards face encryption by generating adversarial identity masks,","venue":null,"work_id":"9c33942b-0dff-469b-9739-19c6db75f64c","year":2021},"citing_paper":{"arxiv_id":"2509.03108","last_updated":"2025-09-12T10:53:43Z","snapshot_observed_at":"2026-08-05T11:12:04.085150Z","submitted_at":"2025-09-03T08:05:36Z","title":"Backdoor Poisoning Attack Against Face Spoofing Attack Detection Methods","version":2},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-05T11:12:07.730210Z"},"links":{"citing_paper":"/paper/2509.03108"},"observation_digest":"sha256:2f76a13ebeaefc6b3e23d74cfe573880ed8ea7ec223dbc3a39a8a602fee14c3b","observation_id":"8f08c084-7c69-4bf1-abe7-a5b4801b1e1e","resolution":{"observed_at":"2026-08-05T11:12:10.000977Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2007.04118","last_updated":"2021-09-29T08:01:13Z","snapshot_observed_at":"2026-08-09T06:48:13.110103Z","submitted_at":"2020-07-08T13:39:22Z","title":"RobFR: Benchmarking Adversarial Robustness on Face Recognition","version":2},"cited_work":{"arxiv_id":"2007.04118","doi":null,"metadata_source":"pith","pith_arxiv_id":"2007.04118","snapshot_observed_at":"2026-08-05T11:12:08.478746Z","title":"RobFR: Benchmarking Adversarial Robustness on Face Recognition","venue":"cs.CV","work_id":"5c7d2869-6922-43f5-9a15-4716c17a8a4e","year":2020},"citing_paper":{"arxiv_id":"2509.03108","last_updated":"2025-09-12T10:53:43Z","snapshot_observed_at":"2026-08-05T11:12:04.085150Z","submitted_at":"2025-09-03T08:05:36Z","title":"Backdoor Poisoning Attack Against Face Spoofing Attack Detection Methods","version":2},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-05T11:12:07.784971Z"},"links":{"cited_paper":"/paper/2007.04118","citing_paper":"/paper/2509.03108"},"observation_digest":"sha256:1b7706532212d9213afa70ceee9bcfa868ca8559867b16d90269599a597aaf72","observation_id":"ca9bd857-08c4-498e-acfa-daa4255e9561","resolution":{"observed_at":"2026-08-05T11:12:08.541695Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T11:12:09.718367Z","title":"Integrating structured biological data by kernel maximum mean discrepancy,","venue":null,"work_id":"1231d337-7fb4-4ae9-b87d-c62b1801fd13","year":2006},"citing_paper":{"arxiv_id":"2509.03108","last_updated":"2025-09-12T10:53:43Z","snapshot_observed_at":"2026-08-05T11:12:04.085150Z","submitted_at":"2025-09-03T08:05:36Z","title":"Backdoor Poisoning Attack Against Face Spoofing Attack Detection Methods","version":2},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-05T11:12:07.866899Z"},"links":{"citing_paper":"/paper/2509.03108"},"observation_digest":"sha256:6a6c25f0c7ac7520b990e3e2754199573aab6565b9876fb9543838fd8b0174fa","observation_id":"95668697-09b8-452b-8a7f-bddf963f50a7","resolution":{"observed_at":"2026-08-05T11:12:09.825120Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T11:12:09.575121Z","title":"U-Net: Convol utional net- works for biomedical image segmentation,","venue":null,"work_id":"20dc18f8-6e3f-42ad-b79a-12d2835dc07d","year":2015},"citing_paper":{"arxiv_id":"2509.03108","last_updated":"2025-09-12T10:53:43Z","snapshot_observed_at":"2026-08-05T11:12:04.085150Z","submitted_at":"2025-09-03T08:05:36Z","title":"Backdoor Poisoning Attack Against Face Spoofing Attack Detection Methods","version":2},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-05T11:12:07.923375Z"},"links":{"citing_paper":"/paper/2509.03108"},"observation_digest":"sha256:b7e0981a78cf3e578f73636dc30411680e22fb3954ad7fdbc7870c786bf405f9","observation_id":"e9d08cb7-7218-4b86-88c6-415efc99c211","resolution":{"observed_at":"2026-08-05T11:12:09.654338Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T11:12:09.406882Z","title":"Deep residual learni ng for image recognition,","venue":null,"work_id":"6efa851f-ef3b-453f-8517-34f9cf075a5d","year":2016},"citing_paper":{"arxiv_id":"2509.03108","last_updated":"2025-09-12T10:53:43Z","snapshot_observed_at":"2026-08-05T11:12:04.085150Z","submitted_at":"2025-09-03T08:05:36Z","title":"Backdoor Poisoning Attack Against Face Spoofing Attack Detection Methods","version":2},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-05T11:12:08.003054Z"},"links":{"citing_paper":"/paper/2509.03108"},"observation_digest":"sha256:c3847e579172d3d50253a08cd7d1d5ce1ce53e002147258e2c0b669932c299b8","observation_id":"ceb57863-4ea8-47d1-976a-19acccfae133","resolution":{"observed_at":"2026-08-05T11:12:09.491393Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T11:12:09.267145Z","title":"ArcFace: Additive an gular margin loss for deep face recognition,","venue":null,"work_id":"5cf39e57-72e9-4fac-99f5-025e1800f379","year":2019},"citing_paper":{"arxiv_id":"2509.03108","last_updated":"2025-09-12T10:53:43Z","snapshot_observed_at":"2026-08-05T11:12:04.085150Z","submitted_at":"2025-09-03T08:05:36Z","title":"Backdoor Poisoning Attack Against Face Spoofing Attack Detection Methods","version":2},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-05T11:12:08.059986Z"},"links":{"citing_paper":"/paper/2509.03108"},"observation_digest":"sha256:11818948f7d5f4b5646791514f91c0fe1610cc49304f6b29d39bd2fc0cf6f10b","observation_id":"c534381d-a5fa-4308-83ab-e9c79aac0ed1","resolution":{"observed_at":"2026-08-05T11:12:09.348013Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T11:12:09.099008Z","title":"Deep learning face a ttributes in the wild,","venue":null,"work_id":"7b22ebb3-99da-4887-853a-b5f7694f6297","year":2015},"citing_paper":{"arxiv_id":"2509.03108","last_updated":"2025-09-12T10:53:43Z","snapshot_observed_at":"2026-08-05T11:12:04.085150Z","submitted_at":"2025-09-03T08:05:36Z","title":"Backdoor Poisoning Attack Against Face Spoofing Attack Detection Methods","version":2},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-05T11:12:08.146900Z"},"links":{"citing_paper":"/paper/2509.03108"},"observation_digest":"sha256:5b766f971ceb225d5928e463bf6a526999eaa8baf2f62d47eb7e8e2de246df83","observation_id":"d1c6df91-647c-4b23-9658-4b15818967cd","resolution":{"observed_at":"2026-08-05T11:12:09.179260Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T11:12:08.932852Z","title":"Adam: A method for stochastic optim ization,","venue":null,"work_id":"e712c7be-9f8c-4aaa-8ca6-e14e8794ca9e","year":2015},"citing_paper":{"arxiv_id":"2509.03108","last_updated":"2025-09-12T10:53:43Z","snapshot_observed_at":"2026-08-05T11:12:04.085150Z","submitted_at":"2025-09-03T08:05:36Z","title":"Backdoor Poisoning Attack Against Face Spoofing Attack Detection Methods","version":2},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-05T11:12:08.228210Z"},"links":{"citing_paper":"/paper/2509.03108"},"observation_digest":"sha256:0d880e39d42b6bcc1a2a114c7e1c8023b6ef19754ae7dcaf3ab39925be9eb625","observation_id":"24c8e398-f4a2-4155-a742-62ece320a5ad","resolution":{"observed_at":"2026-08-05T11:12:09.011822Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T11:12:08.768393Z","title":"Patchnet: A simple face anti-spoofing framework via fine-grained patch recogni tion,","venue":null,"work_id":"f519d170-484f-4e57-8ba7-bc051e11e036","year":2022},"citing_paper":{"arxiv_id":"2509.03108","last_updated":"2025-09-12T10:53:43Z","snapshot_observed_at":"2026-08-05T11:12:04.085150Z","submitted_at":"2025-09-03T08:05:36Z","title":"Backdoor Poisoning Attack Against Face Spoofing Attack Detection Methods","version":2},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-05T11:12:08.286188Z"},"links":{"citing_paper":"/paper/2509.03108"},"observation_digest":"sha256:a7e4a2f4e3cc4d6f8a7a7f1158b4615b20748c77fdc3508b0be24ceafa664662","observation_id":"9cb38b8f-29a6-4df0-9084-1582b2aa26fd","resolution":{"observed_at":"2026-08-05T11:12:08.844612Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T11:12:08.602216Z","title":"The unreasonable effectiveness of deep features as a perceptua l metric,","venue":null,"work_id":"d404b5f4-f1eb-41b8-bc3a-1e0417f00741","year":2018},"citing_paper":{"arxiv_id":"2509.03108","last_updated":"2025-09-12T10:53:43Z","snapshot_observed_at":"2026-08-05T11:12:04.085150Z","submitted_at":"2025-09-03T08:05:36Z","title":"Backdoor Poisoning Attack Against Face Spoofing Attack Detection Methods","version":2},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-05T11:12:08.373380Z"},"links":{"citing_paper":"/paper/2509.03108"},"observation_digest":"sha256:118c48c9e499099f9e036429f07f2ec1773066222bef18630864a80cbc3b0318","observation_id":"1bdb9a7d-105b-4992-bea8-3e8e60eceb9f","resolution":{"observed_at":"2026-08-05T11:12:08.680433Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2509.03108","last_updated":"2025-09-12T10:53:43Z","latest_version":2,"primary_category":"cs.CV","snapshot_observed_at":"2026-08-05T11:12:04.085150Z","submitted_at":"2025-09-03T08:05:36Z","title":"Backdoor Poisoning Attack Against Face Spoofing Attack Detection Methods"},"reference_resolution":{"displayed":24,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":1,"verified_exact":1,"verified_fuzzy":22},"total_outbound_references":24},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"thesis":"As of 10 August 2026, this Paper Citation Record lists 24 of 24 outbound references and 0 inbound Pith citation observations for arXiv:2509.03108."}